Vulnerability intelligence

CVE-2020-2551

Oracle Fusion Middleware Unspecified Vulnerability

Oracle Fusion Middleware

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Score

9.8

Critical

EPSS — Exploit Probability

93%

Riskier than 100% of all CVEs · checked 2026-10-17

Exploitation

Confirmed in the wild

KEV since 2023-11-16

Remediation

Unconfirmed

Federal deadline 2023-12-07

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2023-12-07.

NVD entry CISA KEV

1 article across 1 outlet · first covered Mar 26, 2026 · latest Mar 26, 2026

Coverage timeline

Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds
www.infosecurity-magazine.com · Mar 26, 2026

Related CVEs — Oracle

CVE-2026-35273KEV CVE-2025-61882KEV CVE-2026-21962KEV CVE-2026-46817KEV CVE-2024-21182KEV CVE-2017-10271KEV CVE-2020-14882KEV CVE-2025-61757KEV