CVE-2020-14750

10 known exploits for CVE-2020-14750

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products: Oracle Weblogic Server
Oracle Weblogic Server: = 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0

Fix: Available
CVSS 3.1: 9.8 CRITICAL
EPSS: 99.3% (100th percentile)
NVD status: Analyzed
Published: 2020-11-01

CVE-2020-14750 at NVD

Authoritative description, scoring and affected products

Exploit for CVE-2020-14882

2025-11-04 B1ack4shGITHUB

Exploit for Authentication Bypass Using an Alternate Path or Channel in Solarwinds Orion_Platform

2021-10-20 ChurquleGITEE

Exploit for CVE-2021-2109

2021-01-22 rabbitsafeGITHUB

Oracle WebLogic Server Administration Console Handle RCE

2020-11-19 voidfyoo, Jang, wvu <wvu@metasploit.com>METASPLOITRuby

Oracle WebLogic Server Administration Console Handle Remote Code Execution Exploit

2020-11-19 metasploitZDTRuby

Oracle WebLogic Server Administration Console Handle Remote Code Execution

2020-11-19 wvuPACKETSTORMRuby

Exploit for CVE-2020-14882

2020-11-12 corelightGITHUB

Exploit for CVE-2020-14750

2020-11-06 pprietosanchezGITHUB

2020-11-01 oracleUNKNOWN

Exploit for CVE-2020-14882

2020-10-28 jas502nGITHUB