Exploit for CVE-2020-2551

kitploit · 2026-08-25

Description

RCE in Oracle WebLogic Server via IIOP protocol enabled by default.

Affected Oracle Weblogic Server versions

Oracle Weblogic Server= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0

All known vulnerabilities by product

Oracle Weblogic Server

CVSS 9.8 for CVE-2020-2551

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-25 22:47

Last Seen:2026-08-26 00:39

Reporter:KitPloit

Tags

WebLogic ServerRemote Code ExecutionIIOP ProtocolDefault Configuration

Other exploits for CVE-2020-2551

2026-08-27 KitPloitKITPLOIT

Weblogic-CVE-2020-2551-To-Internet

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

weblogicScanner

2026-08-26 KitPloitKITPLOIT

CVE-Web-Framework

2026-08-13 chengbochuan3GITHUB

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CVE-2020-2551
# CVE-2020-2551 Weblogic IIOPを利用したRCE

## 0x01 IIOPのデフォルト有効化

![](https://assets.kitploit.com/production/public/readmes/27359/9b12801c42af51f57a2c1965ef94f3cbd7ca64425e1375a5959a4da885fd7f20.png)

## 0x02 Pocデモ

![](https://assets.kitploit.com/production/public/readmes/27359/933e76242d8f816ddaecfe759d8d918c937e94d35f92fe957b99aa9e088cb674.gif)