Critical Oracle WebLogic Console Flaw Enables Unauthenticated Server Takeover
Active Exploitation · 2 sources · Updated 1mo ago · First seen Oct 21, 2020
A critical vulnerability in the Oracle WebLogic Server Console, tracked as CVE-2020-14882, allows an unauthenticated attacker with HTTP network access to compromise an affected server without user interaction. The flaw affects five WebLogic versions identified as supported at disclosure and carries a CVSS 3.1 score of 9.8, with high impacts on confidentiality, integrity, and availability. Oracle addressed the vulnerability in its October 2020 Critical Patch Update.
The vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, and public exploitation resources include a Metasploit module, a GitHub proof of concept, and Packet Storm remote-code-execution entries. Organizations running affected WebLogic deployments should prioritize the applicable Oracle Patch Set Updates, restrict access to the administration console, and investigate exposed systems for signs of compromise; the known-exploitation listing makes remediation more urgent than the severity score alone.
