Lucene search
HistoryApr 15, 2020 - 2:15 p.m.
CVE-2020-2801
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.046
Percentile
92.6%
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected configurations
Node
oracleweblogic_serverMatch10.3.6.0.0
ORoracleweblogic_serverMatch12.1.3.0.0
ORoracleweblogic_serverMatch12.2.1.3.0
ORoracleweblogic_serverMatch12.2.1.4.0
oraclejdkMatch1.7.0update191
ORoraclejdkMatch1.7.0update191_b31
ORoraclejdkMatch1.7.0update191_b32
ORoraclejdkMatch1.7.0update2
ORoraclejdkMatch1.7.0update201
ORoraclejdkMatch1.7.0update201_b31
ORoraclejdkMatch1.7.0update21
ORoraclejdkMatch1.7.0update21_b31
ORoraclejdkMatch1.7.0update211
ORoraclejdkMatch1.7.0update211_b31
ORoraclejdkMatch1.7.0update211_b32
ORoraclejdkMatch1.7.0update221
ORoraclejdkMatch1.7.0update221_b31
ORoraclejdkMatch1.7.0update221_b32
ORoraclejdkMatch1.7.0update221_b34
ORoraclejdkMatch1.7.0update221_b35
ORoraclejdkMatch1.7.0update231
ORoraclejdkMatch1.7.0update231_b32
ORoraclejdkMatch1.7.0update241
ORoraclejdkMatch1.7.0update241_b31
ORoraclejdkMatch1.7.0update25
ORoraclejdkMatch1.7.0update25_b33
ORoraclejdkMatch1.7.0update25_b34
ORoraclejdkMatch1.7.0update25_b35
ORoraclejdkMatch1.7.0update251
ORoraclejdkMatch1.7.0update261
ORoraclejdkMatch1.7.0update271
ORoraclejdkMatch1.7.0update271_b31
ORoraclejdkMatch1.7.0update281
ORoraclejdkMatch1.7.0update281_b32
ORoraclejdkMatch1.7.0update281_b33
ORoraclejdkMatch1.7.0update291
ORoraclejdkMatch1.7.0update291_b31
ORoraclejdkMatch1.7.0update291_b32
ORoraclejdkMatch1.7.0update3
ORoraclejdkMatch1.7.0update301
ORoraclejdkMatch1.7.0update301_b31
ORoraclejdkMatch1.7.0update311_b31
ORoraclejdkMatch1.7.0update321
ORoraclejdkMatch1.7.0update321_b31
ORoraclejdkMatch1.7.0update331
ORoraclejdkMatch1.7.0update341
ORoraclejdkMatch1.7.0update341_b31
ORoraclejdkMatch1.7.0update343
ORoraclejdkMatch1.7.0update343_b31
ORoraclejdkMatch1.7.0update4
ORoraclejdkMatch1.7.0update40
ORoraclejdkMatch1.7.0update45
ORoraclejdkMatch1.7.0update45_b31
ORoraclejdkMatch1.7.0update45_b32
ORoraclejdkMatch1.7.0update45_b33
ORoraclejdkMatch1.7.0update45_b34
ORoraclejdkMatch1.7.0update5
ORoraclejdkMatch1.7.0update51
ORoraclejdkMatch1.7.0update51_b31
ORoraclejdkMatch1.7.0update51_b32
ORoraclejdkMatch1.7.0update51_b33
ORoraclejdkMatch1.7.0update55
ORoraclejdkMatch1.7.0update55_b31
ORoraclejdkMatch1.7.0update55_b32
ORoraclejdkMatch1.7.0update55_b33
ORoraclejdkMatch1.7.0update55_b35
ORoraclejdkMatch1.7.0update6
ORoraclejdkMatch1.7.0update60
ORoraclejdkMatch1.7.0update60_b32
ORoraclejdkMatch1.7.0update60_b33
ORoraclejdkMatch1.7.0update65
ORoraclejdkMatch1.7.0update65_b33
ORoraclejdkMatch1.7.0update67
ORoraclejdkMatch1.7.0update67_b31
ORoraclejdkMatch1.7.0update67_b34
ORoraclejdkMatch1.7.0update7
ORoraclejdkMatch1.7.0update7_b32
ORoraclejdkMatch1.7.0update71
ORoraclejdkMatch1.7.0update72
ORoraclejdkMatch1.7.0update72_b31
ORoraclejdkMatch1.7.0update72_b32
ORoraclejdkMatch1.7.0update72_b33
ORoraclejdkMatch1.7.0update75
ORoraclejdkMatch1.7.0update76
ORoraclejdkMatch1.7.0update76_b32
ORoraclejdkMatch1.7.0update76_b33
ORoraclejdkMatch1.7.0update76_b34
ORoraclejdkMatch1.7.0update76_b35
ORoraclejdkMatch1.7.0update76_b36
ORoraclejdkMatch1.7.0update76_b37
ORoraclejdkMatch1.7.0update76_b38
ORoraclejdkMatch1.7.0update79
ORoraclejdkMatch1.7.0update80
ORoraclejdkMatch1.7.0update80_b33
ORoraclejdkMatch1.7.0update80_b35
ORoraclejdkMatch1.7.0update85
ORoraclejdkMatch1.7.0update85_b31
ORoraclejdkMatch1.7.0update85_b33
ORoraclejdkMatch1.7.0update85_b34
ORoraclejdkMatch1.7.0update9
ORoraclejdkMatch1.7.0update9_b31
ORoraclejdkMatch1.7.0update9_b32
ORoraclejdkMatch1.7.0update91
ORoraclejdkMatch1.7.0update91_b17
ORoraclejdkMatch1.7.0update91_b32
ORoraclejdkMatch1.7.0update91_b33
ORoraclejdkMatch1.7.0update95
ORoraclejdkMatch1.7.0update95_b13
ORoraclejdkMatch1.7.0update95_b31
ORoraclejdkMatch1.7.0update95_b32
ORoraclejdkMatch1.7.0update97
ORoraclejdkMatch1.7.0update97_b31
ORoraclejdkMatch1.7.0update97_b32
ORoraclejdkMatch1.7.0update97_b33
ORoraclejdkMatch1.7.0update99
ORoraclejdkMatch1.7.0update99_b31
ORoraclejdkMatch1.8.0update181
ORoraclejdkMatch1.8.0update182
ORoraclejdkMatch1.8.0update191
ORoraclejdkMatch1.8.0update192
ORoraclejdkMatch1.8.0update20
ORoraclejdkMatch1.8.0update201
ORoraclejdkMatch1.8.0update202
ORoraclejdkMatch1.8.0update211
ORoraclejdkMatch1.8.0update212
ORoraclejdkMatch1.8.0update221
ORoraclejdkMatch1.8.0update231
ORoraclejdkMatch1.8.0update241
ORoraclejdkMatch1.8.0update25
ORoraclejdkMatch1.8.0update251
ORoraclejdkMatch1.8.0update252
ORoraclejdkMatch1.8.0update261
ORoraclejdkMatch1.8.0update271
ORoraclejdkMatch1.8.0update281
ORoraclejdkMatch1.8.0update291
ORoraclejdkMatch1.8.0update301
ORoraclejdkMatch1.8.0update31
ORoraclejdkMatch1.8.0update311
ORoraclejdkMatch1.8.0update321
ORoraclejdkMatch1.8.0update331
ORoraclejdkMatch1.8.0update333
ORoraclejdkMatch1.8.0update341
ORoraclejdkMatch1.8.0update345enterprise_performance_pack
ORoraclejdkMatch1.8.0update40
ORoraclejdkMatch1.8.0update45
ORoraclejdkMatch1.8.0update5
ORoraclejdkMatch1.8.0update51
ORoraclejdkMatch1.8.0update6
ORoraclejdkMatch1.8.0update60
ORoraclejdkMatch1.8.0update65
ORoraclejdkMatch1.8.0update66
ORoraclejdkMatch1.8.0update71
ORoraclejdkMatch1.8.0update72
ORoraclejdkMatch1.8.0update73
ORoraclejdkMatch1.8.0update74
ORoraclejdkMatch1.8.0update77
ORoraclejdkMatch1.8.0update91
ORoraclejdkMatch1.8.0update92
| Vendor | Product | Version | CPE |
|---|---|---|---|
| oracle | weblogic_server | 10.3.6.0.0 | cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* |
| oracle | weblogic_server | 12.1.3.0.0 | cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* |
| oracle | weblogic_server | 12.2.1.3.0 | cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | weblogic_server | 12.2.1.4.0 | cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* |
| oracle | jdk | 1.7.0 | cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:* |
| oracle | jdk | 1.7.0 | cpe:2.3:a:oracle:jdk:1.7.0:update191_b31:*:*:*:*:*:* |
| oracle | jdk | 1.7.0 | cpe:2.3:a:oracle:jdk:1.7.0:update191_b32:*:*:*:*:*:* |
| oracle | jdk | 1.7.0 | cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:* |
| oracle | jdk | 1.7.0 | cpe:2.3:a:oracle:jdk:1.7.0:update201:*:*:*:*:*:* |
| oracle | jdk | 1.7.0 | cpe:2.3:a:oracle:jdk:1.7.0:update201_b31:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2020-2801
2020-04-15 13:29:46
cve
cve
CVE-2020-2801
2020-04-15 14:15:28
prion
prion
Code injection
2020-04-15 14:15:00
cbl_mariner
cbl_mariner
CVE-2020-2801 affecting package openjdk8 1.8.0.332-1
2024-09-30 09:32:20
checkpoint_advisories
checkpoint_advisories
nessus
nessus
Oracle WebLogic Server Multiple Vulnerabilities (Apr 2020 CPU)
2020-04-16 00:00:00
githubexploit
githubexploit
Exploit for CVE-2014-4210
2022-03-19 01:54:15
Exploit for CVE-2014-4210
2022-03-19 01:54:15
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.046
Percentile
92.6%
Related for NVD:CVE-2020-2801