VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 06:50 UTC

CVE-2020-14883

Read full description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS 7.2 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.6/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 7.2: +1.08
Fresh EPSS: 97.73%: +0.49

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 7 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

CloudSEK

Press · 25 Mar 2026, 14:27 · Honey for Hackers: A Study of Attacks Targeting the Recent CVE-2026-21962 and Other Critical WebLogic Vulnerabilities on a High Interactive Oracle Honeypot - CloudSEK

The Hacker News

Press · 21 Dec 2023, 08:00 · Hackers Exploiting MS Excel Vulnerability to Spread Agent Tesla Malware - The Hacker News

InfoStealers

Press · 20 Dec 2023, 08:00 · 8220 gang exploits old Oracle WebLogic vulnerability to deliver infostealers, cryptominers. - InfoStealers

www.trendmicro.com

Press · 14 Sep 2022, 07:00 · A Post-exploitation Look at Coinminers Abusing WebLogic Vulnerabilities - www.trendmicro.com

www.trendmicro.com

Press · 18 Oct 2021, 07:00 · Tracking CVE-2021-26084 and Other Server-Based Vulnerability Exploits via Trend Micro Cloud One and Trend Micro Vision One - www.trendmicro.com

See all 7 source documents

Akamai

Press · 16 Sep 2021, 07:00 · Kingsing Evolves | Akamai Blog - Akamai

Unit 42

Press · 12 Apr 2021, 07:00 · Network Attack Trends: Internet of Threats (November 2020-January 2021) - Unit 42

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

See 1 repos with metrics

Repository	Stars	Forks	Language	Updated
1n7erface/PocList	1,070	312	Java	11 May 2023, 14:36

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 7.2; EPSS 97.7%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, high privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:14.320098+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Published

21 Oct 2020, 14:04

First press mention

12 Apr 2021, 07:00

Added to the CISA KEV catalog

03 Nov 2021, 00:00

Latest press mention

25 Mar 2026, 14:27

Score calculated

05 Nov 2026, 13:58

PoCs on GitHub

1 repositories