Oracle · Fusion Middleware
CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability
무엇인가
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CISA: Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.
할 일
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
미국 연방 기관 조치 기한: 2023년 12월 7일
Oracle의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2025. 11. 21. | Missing Authentication for Critical Function | Fusion Middleware | 치명적 9.8 | 89% |
| 2022. 11. 28. | Unspecified | Fusion Middleware | 치명적 9.8 | 96% |
| 2022. 5. 25. | Unspecified | Fusion Middleware | 치명적 9.8 | 7.8% |
| 2022. 3. 28. | Unspecified | Fusion Middleware | 보통 4.7 | 4.7% |
| 2021. 11. 3. | Unspecified | Fusion Middleware | 치명적 9.1 | 99% |
| 2026. 8. 24. | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 치명적 10.0 | 73% |
| 2026. 7. 15. | Improper Privilege Management | E-Business Suite | 치명적 9.8 | 12% |
| 2026. 6. 12. | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | 치명적 9.8 | 97% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.