CVE-2020-14644
OR
Oracle WebLogic Server
Oracle WebLogic Server Remote Code Execution Vulnerability
What it is
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Oracle entries on the list
- HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CVE-2026-21962 · Aug 24, 2026
- E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability CVE-2026-46817 · Jul 15, 2026
- PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CVE-2026-35273 · Jun 12, 2026
- WebLogic Server Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 · Jun 1, 2026
- Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability CVE-2025-61757 · Nov 21, 2025
- E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CVE-2025-61884 · Oct 20, 2025