CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerability

CVE ID

CVE-2020-2551

Vulnerability Name

Oracle Fusion Middleware Unspecified Vulnerability

• Project: Oracle
• Product: Fusion Middleware

Date

• Date Added: 2023-11-16
• Due Date: 2023-12-07

Description

Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://www.oracle.com/security-alerts/cpujan2020.html; https://nvd.nist.gov/vuln/detail/CVE-2020-2551

Related Security News

• Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

More CVEs Info

Common Vulnerabilities & Exposures (CVE) List