CVE-2020-14644 Oracle WebLogic Server
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Oracle WebLogic Server Remote Code Execution Vulnerability
- Added
- 2024-09-18
- Federal patch deadline
- 2024-10-09
- Ransomware use
- not known