Exploit for CVE-2020-14882-14883

CVE-2020-14882 CVE-2020-1488214 CVE-2020-14883

kitploit · 2026-08-25

Description

Unauthenticated access and code execution in Oracle WebLogic Server Console via crafted requests.

Affected Oracle Weblogic Server versions

Oracle Weblogic Server= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0

All known vulnerabilities by product

Oracle Weblogic Server

CVSS Score

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 04:29

Last Seen:2026-08-26 02:01

Reporter:KitPloit

Tags

WebLogic Consoleunauthorized accesscode executionauthentication bypassHTTP requests

Other exploits for the same CVE

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2020-14882-weblogicRCE

2026-08-28 KitPloitKITPLOIT

CVE-2020-14882_ALL

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-N0CORIANDER-CVE-2020-14882-14883
# CVE-2020-14882&14883

> Weblogic은 Oracle사에서 출시한 J2EE 애플리케이션 서버입니다. `CVE-2020-14882는 Console의 무단 액세스 취약점입니다`. 취약점 등급은 `심각`으로 평가되었으며, 점수는 `9.8`입니다. 그리고 `CVE-2020-14883은 무단 액세스를 이용한 전제 하에 Console에서 코드 실행을 수행합니다`. 따라서 원격 공격자는 특수한 HTTP 요청을 구성하여 인증 없이 WebLogic Server Console을 장악하고 WebLogic Server Console에서 임의 코드를 실행할 수 있습니다.