CVE-2020-14625

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle...

Oracle WebLogic Server Insecure Deserialization (CVE-2020-14625)

An insecure deserialization vulnerability exists in Oracle Weblogic. This vulnerability is due to insufficient validation of T3 and IIOP requests...

CVE-2020-14625

CVE-2020-14625 affects Oracle WebLogic Server (Core) with affected versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via IIOP/T3 to take over the WebLogic Server. CVSS 3.1 base score is 9.8 (CRITICAL) with high impact on confi...