Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2020-2801

🗓️ 15 Apr 2020 13:29:46Reported by oracleType 
cve
 cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 288 Views

Vulnerability in Oracle WebLogic Server allows takeove

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
CBLMariner		CVE-2020-2801 affecting package openjdk8 1.8.0.332-1
12 Jan 202509:15
–cbl_mariner
Circl		CVE-2020-2801
13 Mar 202322:21
–circl
CNVD		Oracle Fusion Middleware WebLogic Server Remote Code Execution Vulnerability
16 Apr 202000:00
–cnvd
Check Point Advisories		Oracle Fusion Middleware WebLogic Server Insecure Deserialization (CVE-2020-2883; CVE-2020-2546; CVE-2020-2798; CVE-2020-2801; CVE-2020-2884)
4 May 202000:00
–checkpoint_advisories
Cvelist		CVE-2020-2801
15 Apr 202013:29
–cvelist
EUVD		EUVD-2020-22594
7 Oct 202500:30
–euvd
Microsoft CVE		Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
2 Oct 202506:11
–mscve
NVD		CVE-2020-2801
15 Apr 202014:15
–nvd
Oracle		Oracle Critical Patch Update Advisory - April 2020
14 Apr 202000:00
–oracle
Tenable Nessus		Oracle WebLogic Server Multiple Vulnerabilities (Apr 2020 CPU)
16 Apr 202000:00
–nessus
Rows per page
NVD
Vulners
Node
oracleweblogic_serverMatch10.3.6.0.0
OR
oracleweblogic_serverMatch12.1.3.0.0
OR
oracleweblogic_serverMatch12.2.1.3.0
OR
oracleweblogic_serverMatch12.2.1.4.0
AND
oraclejdkMatch1.7.0update191
OR
oraclejdkMatch1.7.0update191_b31
OR
oraclejdkMatch1.7.0update191_b32
OR
oraclejdkMatch1.7.0update2
OR
oraclejdkMatch1.7.0update201
OR
oraclejdkMatch1.7.0update201_b31
OR
oraclejdkMatch1.7.0update21
OR
oraclejdkMatch1.7.0update21_b31
OR
oraclejdkMatch1.7.0update211
OR
oraclejdkMatch1.7.0update211_b31
OR
oraclejdkMatch1.7.0update211_b32
OR
oraclejdkMatch1.7.0update221
OR
oraclejdkMatch1.7.0update221_b31
OR
oraclejdkMatch1.7.0update221_b32
OR
oraclejdkMatch1.7.0update221_b34
OR
oraclejdkMatch1.7.0update221_b35
OR
oraclejdkMatch1.7.0update231
OR
oraclejdkMatch1.7.0update231_b32
OR
oraclejdkMatch1.7.0update241
OR
oraclejdkMatch1.7.0update241_b31
OR
oraclejdkMatch1.7.0update25
OR
oraclejdkMatch1.7.0update25_b33
OR
oraclejdkMatch1.7.0update25_b34
OR
oraclejdkMatch1.7.0update25_b35
OR
oraclejdkMatch1.7.0update251
OR
oraclejdkMatch1.7.0update261
OR
oraclejdkMatch1.7.0update271
OR
oraclejdkMatch1.7.0update271_b31
OR
oraclejdkMatch1.7.0update281
OR
oraclejdkMatch1.7.0update281_b32
OR
oraclejdkMatch1.7.0update281_b33
OR
oraclejdkMatch1.7.0update291
OR
oraclejdkMatch1.7.0update291_b31
OR
oraclejdkMatch1.7.0update291_b32
OR
oraclejdkMatch1.7.0update3
OR
oraclejdkMatch1.7.0update301
OR
oraclejdkMatch1.7.0update301_b31
OR
oraclejdkMatch1.7.0update311_b31
OR
oraclejdkMatch1.7.0update321
OR
oraclejdkMatch1.7.0update321_b31
OR
oraclejdkMatch1.7.0update331
OR
oraclejdkMatch1.7.0update341
OR
oraclejdkMatch1.7.0update341_b31
OR
oraclejdkMatch1.7.0update343
OR
oraclejdkMatch1.7.0update343_b31
OR
oraclejdkMatch1.7.0update4
OR
oraclejdkMatch1.7.0update40
OR
oraclejdkMatch1.7.0update45
OR
oraclejdkMatch1.7.0update45_b31
OR
oraclejdkMatch1.7.0update45_b32
OR
oraclejdkMatch1.7.0update45_b33
OR
oraclejdkMatch1.7.0update45_b34
OR
oraclejdkMatch1.7.0update5
OR
oraclejdkMatch1.7.0update51
OR
oraclejdkMatch1.7.0update51_b31
OR
oraclejdkMatch1.7.0update51_b32
OR
oraclejdkMatch1.7.0update51_b33
OR
oraclejdkMatch1.7.0update55
OR
oraclejdkMatch1.7.0update55_b31
OR
oraclejdkMatch1.7.0update55_b32
OR
oraclejdkMatch1.7.0update55_b33
OR
oraclejdkMatch1.7.0update55_b35
OR
oraclejdkMatch1.7.0update6
OR
oraclejdkMatch1.7.0update60
OR
oraclejdkMatch1.7.0update60_b32
OR
oraclejdkMatch1.7.0update60_b33
OR
oraclejdkMatch1.7.0update65
OR
oraclejdkMatch1.7.0update65_b33
OR
oraclejdkMatch1.7.0update67
OR
oraclejdkMatch1.7.0update67_b31
OR
oraclejdkMatch1.7.0update67_b34
OR
oraclejdkMatch1.7.0update7
OR
oraclejdkMatch1.7.0update7_b32
OR
oraclejdkMatch1.7.0update71
OR
oraclejdkMatch1.7.0update72
OR
oraclejdkMatch1.7.0update72_b31
OR
oraclejdkMatch1.7.0update72_b32
OR
oraclejdkMatch1.7.0update72_b33
OR
oraclejdkMatch1.7.0update75
OR
oraclejdkMatch1.7.0update76
OR
oraclejdkMatch1.7.0update76_b32
OR
oraclejdkMatch1.7.0update76_b33
OR
oraclejdkMatch1.7.0update76_b34
OR
oraclejdkMatch1.7.0update76_b35
OR
oraclejdkMatch1.7.0update76_b36
OR
oraclejdkMatch1.7.0update76_b37
OR
oraclejdkMatch1.7.0update76_b38
OR
oraclejdkMatch1.7.0update79
OR
oraclejdkMatch1.7.0update80
OR
oraclejdkMatch1.7.0update80_b33
OR
oraclejdkMatch1.7.0update80_b35
OR
oraclejdkMatch1.7.0update85
OR
oraclejdkMatch1.7.0update85_b31
OR
oraclejdkMatch1.7.0update85_b33
OR
oraclejdkMatch1.7.0update85_b34
OR
oraclejdkMatch1.7.0update9
OR
oraclejdkMatch1.7.0update9_b31
OR
oraclejdkMatch1.7.0update9_b32
OR
oraclejdkMatch1.7.0update91
OR
oraclejdkMatch1.7.0update91_b17
OR
oraclejdkMatch1.7.0update91_b32
OR
oraclejdkMatch1.7.0update91_b33
OR
oraclejdkMatch1.7.0update95
OR
oraclejdkMatch1.7.0update95_b13
OR
oraclejdkMatch1.7.0update95_b31
OR
oraclejdkMatch1.7.0update95_b32
OR
oraclejdkMatch1.7.0update97
OR
oraclejdkMatch1.7.0update97_b31
OR
oraclejdkMatch1.7.0update97_b32
OR
oraclejdkMatch1.7.0update97_b33
OR
oraclejdkMatch1.7.0update99
OR
oraclejdkMatch1.7.0update99_b31
OR
oraclejdkMatch1.8.0update181
OR
oraclejdkMatch1.8.0update182
OR
oraclejdkMatch1.8.0update191
OR
oraclejdkMatch1.8.0update192
OR
oraclejdkMatch1.8.0update20
OR
oraclejdkMatch1.8.0update201
OR
oraclejdkMatch1.8.0update202
OR
oraclejdkMatch1.8.0update211
OR
oraclejdkMatch1.8.0update212
OR
oraclejdkMatch1.8.0update221
OR
oraclejdkMatch1.8.0update231
OR
oraclejdkMatch1.8.0update241
OR
oraclejdkMatch1.8.0update25
OR
oraclejdkMatch1.8.0update251
OR
oraclejdkMatch1.8.0update252
OR
oraclejdkMatch1.8.0update261
OR
oraclejdkMatch1.8.0update271
OR
oraclejdkMatch1.8.0update281
OR
oraclejdkMatch1.8.0update291
OR
oraclejdkMatch1.8.0update301
OR
oraclejdkMatch1.8.0update31
OR
oraclejdkMatch1.8.0update311
OR
oraclejdkMatch1.8.0update321
OR
oraclejdkMatch1.8.0update331
OR
oraclejdkMatch1.8.0update333
OR
oraclejdkMatch1.8.0update341
OR
oraclejdkMatch1.8.0update345enterprise_performance_pack
OR
oraclejdkMatch1.8.0update40
OR
oraclejdkMatch1.8.0update45
OR
oraclejdkMatch1.8.0update5
OR
oraclejdkMatch1.8.0update51
OR
oraclejdkMatch1.8.0update6
OR
oraclejdkMatch1.8.0update60
OR
oraclejdkMatch1.8.0update65
OR
oraclejdkMatch1.8.0update66
OR
oraclejdkMatch1.8.0update71
OR
oraclejdkMatch1.8.0update72
OR
oraclejdkMatch1.8.0update73
OR
oraclejdkMatch1.8.0update74
OR
oraclejdkMatch1.8.0update77
OR
oraclejdkMatch1.8.0update91
OR
oraclejdkMatch1.8.0update92
[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.3.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.4.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 05:26Current
9.2High risk
Vulners AI Score9.2
CVSS 27.5
CVSS 3.19.8
CVSS 39.8
EPSS0.0449
SSVC
oracleweblogic servervulnerabilitycve-2020-2801nvdoracle fusion middlewareiiopt3cvss 3.0patchjdknetwork accesstakeover
288