EXPLOIT/ALERT Back to feed

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.

Published 8 Oct 2026Updated 8 Oct 2026204 sources
CVSS 10.0 ✓ VERIFIED REFERENCE△ CISA KEV
Overview Sources History

What happened

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.

Affected versions

WebLogic Server: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
SploitusUnauthenticated RCE in Oracle WebLogic Server console via double-encoded path traversal.CyberCTF2026-10-08T21:00:56VerifiedCyberCTF/vulhub-weblogic-cve-2020-14882Unauthenticated RCE in Oracle WebLogic Server console via double-encoded path traversal.CyberCTF2026-10-08T21:00:56VerifiedPoC-in-GitHub · murataydemir/CVE-2020-14883[CVE-2020-14882] Oracle WebLogic Server Authenticated Remote Code Execution (RCE)★ 13murataydemir2020-11-09CandidatePoC-in-GitHub · B1anda0/CVE-2020-14883Weblogic 身份认证绕过漏洞批量检测脚本★ 7B1anda02020-11-11CandidatePoC-in-GitHub · fan1029/CVE-2020-14883EXP用于对WebLogic(10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0)进行验证及利用★ 5fan10292021-01-25CandidatePoC-in-GitHub · Osyanina/westone-CVE-2020-14883-scannerA vulnerability scanner that detects CVE-2020-14883 vulnerabilities.★ 0Osyanina2021-02-25CandidatePoC-in-GitHub · 1n7erface/PocListAlibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE★ 10751n7erface2021-03-11CandidatePoC-in-GitHub · amacloudobia/CVE-2020-14883oracle weblogic★ 0amacloudobia2024-06-07Candidate
CorrectionsReport an issue