VulnRadar

Data against noise.

Page generated: 08 Nov 2026, 10:55 UTC

CVE-2020-2551

Read full description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.9/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 9.8: +1.47
Fresh EPSS: 92.82%: +0.46

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 10 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Tech Times

Press · 26 Aug 2026, 07:00 · Oracle Proxy Flaw CVE-2026-21962 Fueled China-Linked Attacks on 100+ Governments - Tech Times

The Hacker News

Press · 25 Aug 2026, 07:00 · Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data - The Hacker News

Security Affairs

Press · 25 Aug 2026, 07:00 · U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog - Security Affairs

Press · 25 Aug 2026, 07:00 · Actively Exploited Oracle WebLogic Vulnerability Exposes Critical Enterprise Data - LinkedIn

CloudSEK

Press · 25 Mar 2026, 14:27 · Honey for Hackers: A Study of Attacks Targeting the Recent CVE-2026-21962 and Other Critical WebLogic Vulnerabilities on a High Interactive Oracle Honeypot - CloudSEK

See all 10 source documents

Help Net Security

Press · 20 Nov 2023, 08:00 · Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671) - Help Net Security

SecurityWeek

Press · 17 Nov 2023, 08:00 · CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability - SecurityWeek

BleepingComputer

Press · 17 Nov 2023, 08:00 · CISA warns of actively exploited Windows, Sophos, and Oracle bugs - BleepingComputer

EclecticIQ Blog

Press · 02 Jun 2023, 07:00 · Chinese Threat Actor Used Modified Cobalt Strike Variant to Attack Taiwanese Critical Infrastructure - EclecticIQ Blog

Sophos

Press · 12 Dec 2021, 08:00 · Log4Shell Hell: anatomy of an exploit outbreak - Sophos

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.9 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

See 4 repos with metrics

Repository	Stars	Forks	Language	Updated
zhzyker/exphub	4,293	1,078	Python	04 Apr 2021, 09:13
hktalent/CVE-2020-2551	210	45	Python	05 Mar 2023, 12:40
zzwlpx/weblogicPoc	89	24	Python	07 Aug 2022, 06:36
Dido1960/Weblogic-CVE-2020-2551-To-Internet	22	7	Python	26 May 2020, 06:58

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 9.8; EPSS 92.8%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, no prior privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:16.425062+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Published

15 Jan 2020, 16:34

First press mention

12 Dec 2021, 08:00

Added to the CISA KEV catalog

16 Nov 2023, 00:00

Latest press mention

26 Aug 2026, 07:00

Score calculated

05 Nov 2026, 13:58

PoCs on GitHub

4 repositories