CVE-2020-14644

Oracle WebLogic Server Remote Code Execution Vulnerability

Description

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.

Severity: CRITICAL

CVSS Score: 9.8

Vendor: Oracle

Product: WebLogic Server