Unpatched Oracle WebLogic Servers Vulnerable to CVE-2020-2883

["US-CERT" <US-CERT () ncas us-cert gov>]

Cybersecurity and Infrastructure Security Agency Logo

National Cyber Awareness System:



Unpatched Oracle WebLogic Servers Vulnerable to CVE-2020-2883 [ 
https://www.us-cert.gov/ncas/current-activity/2020/05/01/unpatched-oracle-weblogic-servers-vulnerable-cve-2020-2883 ] 
05/01/2020 06:05 PM EDT 
Original release date: May 1, 2020

Oracle has released a blog post warning users that a previously disclosed Oracle WebLogic Server remote code execution 
vulnerability (CVE-2020-2883) is being exploited in the wild. Oracle disclosed the vulnerability and provided software 
patches in their April 2020 Critical Patch Update; however, malicious cyber actors are now known to be targeting 
unpatched servers.

The Cybersecurity and Infrastructure Security Agency (CISA) urges users and administrators to review the Oracle Blog [ 
https://blogs.oracle.com/security/apply-april-2020-cpu ] and the April 2020 Critical Patch Updates [ 
https://www.oracle.com/security-alerts/cpuapr2020.html ] for more information and apply the necessary patches as soon 
as possible.

This product is provided subject to this Notification [ https://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ https://www.dhs.gov/privacy-policy ] policy.

body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: normal; font-style: normal; color: 
#333333; } ________________________________________________________________________

A copy of this publication is available at www.us-cert.gov [ https://www.us-cert.gov ]. If you need help or have 
questions, please send an email to info () us-cert gov. Do not reply to this message since this email was sent from a 
notification-only address that is not monitored. To ensure you receive future US-CERT products, please add US-CERT () 
ncas us-cert gov to your address book. 

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ]  

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ]