Vulnerability Intelligence

🛡 CVE-2020-2883

Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic Server

Ransomware use

CISA KEV

EPSS

94.9%
Likely exploited · 100th pct

Added to KEV

2025-01-07
CISA

Remediate by

2025-01-28
⚠ OVERDUE

CWE

weakness

📈 EPSS exploit probability

94.9%
FIRST EPSS — 30-day probability of exploitation in the wild · band Likely exploited · higher than 100% of all scored CVEs

⚠ KEV remediation overdue

CISA required federal remediation by 2025-01-28. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.

🛡 Add to case

Attach CVE-2020-2883 (Vulnerability / CVE) and pull all linked entities:
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php