Lucene search
K

EUVD-2020-22594

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

Vulnerability in Oracle WebLogic Server allows attackers to take over without authentication.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.
29 May 202000:00
bdu_fstec
CBLMariner
CVE-2020-2801 affecting package openjdk8 1.8.0.332-1
12 Jan 202509:15
cbl_mariner
Circl
CVE-2020-2801
13 Mar 202322:21
circl
CNVD
Oracle Fusion Middleware WebLogic Server Remote Code Execution Vulnerability
16 Apr 202000:00
cnvd
Check Point Advisories
Oracle Fusion Middleware WebLogic Server Insecure Deserialization (CVE-2020-2883; CVE-2020-2546; CVE-2020-2798; CVE-2020-2801; CVE-2020-2884)
4 May 202000:00
checkpoint_advisories
CVE
CVE-2020-2801
15 Apr 202013:29
cve
Cvelist
CVE-2020-2801
15 Apr 202013:29
cvelist
Microsoft CVE
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
2 Oct 202506:11
mscve
NVD
CVE-2020-2801
15 Apr 202014:15
nvd
Oracle
Oracle Critical Patch Update Advisory - April 2020
14 Apr 202000:00
oracle
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "29643692-b883-3e5b-b384-72db1effd560",
        "vendor": {
          "name": "Oracle Corporation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "447887f4-29b1-3756-858d-644058658cc0",
        "product": {
          "name": "WebLogic Server"
        },
        "product_version": "12.2.1.4.0"
      },
      {
        "id": "8d5f4361-3247-3f2e-a5da-4d71f676c475",
        "product": {
          "name": "WebLogic Server"
        },
        "product_version": "12.2.1.3.0"
      },
      {
        "id": "8deeb9b4-041e-3b5b-8d83-819cc2dade0a",
        "product": {
          "name": "WebLogic Server"
        },
        "product_version": "12.1.3.0.0"
      },
      {
        "id": "fce38e79-a24a-3580-8f17-4fdb96376186",
        "product": {
          "name": "WebLogic Server"
        },
        "product_version": "10.3.6.0.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2025 00:30Current
9.3High risk
Vulners AI Score9.3
CVSS 39.8
CVSS 27.5
CVSS 3.19.8
EPSS0.0449
SSVC
2