Oracle Fusion Middleware Unspecified Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 15, 2020 · Catalog

   Detected

   Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeove

2. Nov 16, 2023 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Dec 7, 2023 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Jun 16, 2026 · Catalog

   Updated

   Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeove

Affected

• cpe oracle/weblogic server10.3.6.0.0
• cpe oracle/weblogic server12.1.3.0.0
• cpe oracle/weblogic server12.2.1.3.0
• cpe oracle/weblogic server12.2.1.4.0
• vendor Oracle Fusion Middlewareversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2020-2551

  Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.

  cisa.gov
• CVE.orgVulnerability recordCVE-2020-2551

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2020-2551

  30-day exploitation probability 92.8%

  first.org
• NIST NVDVulnerability recordCVE-2020-2551

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with netw

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• CISA note · oracle.com