Oracle WebLogic Server Multiple Vulnerabilities (Oct 2020 CPU)

The version of WebLogic Server installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2020 CPU advisory. - An unspecified vulnerability exists in the Console component. An unauthenticated, remote attacker with network access via HTTP can exploit this iss...

CVE-2020-14841

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to...

CVE-2020-14841

CVE-2020-14841 affects Oracle WebLogic Server (Core) across 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The Red Hat/RedHat-advised entries and ZDI disclosures show a remote code execution flaw exploitable via the IIOP protocol. An unauthenticated attacker with network access ca...