CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server Authenticated Remote Code Execution RCE Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows...

CVE-2020-14882-WebLogic-Analysis

漏洞研究：在 Oracle WebLogic Server 中利用 CVE-2020-14882 与 CVE-2020-14883 漏洞链 该仓库包含一份技术报告（Write-up）和概念验证（Proof of Concept，PoC），用于演示 Oracle WebLogic Server 管理控制台组件中认证绕过（Authentication Bypass）与远程代码执行（RCE）漏洞链的利用。 🛑 警告与免责声明： 本材料仅用于教育目的及合法的安全审计（渗透测试）。未经所有者事先书面同意，针对系统使用所述技术将依法追究责任。 🏗 研究架构与技术栈 目标： 部署了 Oracle...

CVE-2022-21445

CVE-2022-21445 漏洞利用 - PoC 本工具包用于生成 CVE-2022-21445 的漏洞利用载荷。CVE-2022-21445 是一个影响 Oracle WebLogic Server 12.2.1.x（运行 Oracle ADF Faces）的严重 Java 反序列化漏洞。 该漏洞存在于 RemoteApplicationResourceLoader 组件中，攻击者可发送特制的 HTTP GET 请求触发不安全反序列化。若利用成功，可在目标服务器上实现未授权远程代码执行（RCE）。 前提条件 要求| 版本| 用途 ---|---|--- Python| 3.6+|...

CVE-2020-14882

CVE-2020-14882 このPythonスクリプトは、Oracle WebLogic Serverのリモートコード実行の脆弱性（CVE-2020-14882）を悪用して、脆弱なターゲットサーバ上でコマンドを実行し、その出力をHTTPリクエストを通じて取得するように設計されています。まず、ターゲットのWebLogic...

CVE-2021-2109

Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...

patch-CVE-2026-22024

补丁：CVE-2026-22024 漏洞详情 CVE ：CVE-2026-22024 产品 ：Oracle WebLogic Server 描述 ：反序列化漏洞 严重性 ：严重 补丁状态：已部署 字段| 值 ---|--- 补丁日期| 2026-07-01 状态| 已部署 部署位置| 生产环境 验证人员| 安全运维团队 参考 NVD CISA KEV...

Oracle-WLS-Weblogic-RCE

Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic RCE test sciript CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication. This script which check the presence or absence of a page ...

CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML 认证绕过 PoC 该仓库提供了针对 CVE-2026-60206 的概念验证利用代码，这是 Oracle WebLogic Server SAML 实现中的一个关键认证绕过漏洞。该漏洞允许远程低权限攻击者通过伪造 SAML 断言完全入侵服务器。 ⚠️ 免责声明： 本工具仅限授权的安全研究和测试 使用。仅可对您拥有或获得明确许可的系统进行测试。作者不对滥用行为承担任何责任。 🔥 漏洞概述 CVE-2026-60206 影响 Oracle WebLogic Server 的核心组件。该漏洞源于 SAML...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 Description CVE-2024-21182 is an unauthenticated JNDI injection vulnerability affecting the Core component of Oracle WebLogic Server. It allows a remote attacker, vi...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

CVE-2020-14882

Oracle WebLogic Unauthenticated RCE Exploit This PowerShell script exploits CVE-2020-14882 to achieve unauthenticated remote code execution on Oracle WebLogic Server versions: 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Usage root@kitploit: .\exploit.ps1 -target 'https://target:7001'...

CVE-2020-14882

WebLogic RCE 漏洞 - CVE-2020-14882 简介 CVE-2020-14882 是 Oracle WebLogic Server 控制台组件中的一个远程代码执行 RCE 漏洞。该未授权漏洞的攻击复杂度被评定为“低”，并被 Oracle 标为“易于利用”，从而获得了 9.8 分的严重 CVSSv3 评分。成功利用后，未经身份验证的攻击者能够通过 HTTP 入侵 Oracle WebLogic 服务器，并完全控制主机。（了解更多 - Tenable） 评分严重性 - CVSS 3 ⚠️ 受影响的支持版本为 10.3.6.0.0, 12.1.3.0.0,...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

Oracle WebLogic Server Remote Takeover (August 2026 CPU) (12.2.1.4.0 / 14.1.1.0.0 / 14.1.2.0.0)

The 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 versions of WebLogic Server installed on the remote host are affected by a vulnerability as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components...

Oracle WebLogic Server (August 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

CVE-2026-60977

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromis...

CVE-2026-60698

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise...

CVE-2026-60702

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromi...