CVE-2020-2551
OR
Oracle Fusion Middleware
Oracle Fusion Middleware Unspecified Vulnerability
What it is
Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Oracle entries on the list
- HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CVE-2026-21962 · Aug 24, 2026
- E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability CVE-2026-46817 · Jul 15, 2026
- PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CVE-2026-35273 · Jun 12, 2026
- WebLogic Server Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 · Jun 1, 2026
- Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability CVE-2025-61757 · Nov 21, 2025
- E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CVE-2025-61884 · Oct 20, 2025