.. / CVE-2020-14750

Exploit for Oracle WebLogic Server - Remote Command Execution (CVE-2020-14750)

Description:

Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised machine without entering necessary credentials. See also CVE-2020-14882, which is addressed in the October 2020 Critical Patch Update.

Nuclei Template

View the template here CVE-2020-14750.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-14750.yaml
Copy

References:

https://github.com/pprietosanchez/CVE-2020-14750
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14750
https://nvd.nist.gov/vuln/detail/CVE-2020-14750
http://packetstormsecurity.com/files/160143/Oracle-WebLogic-Server-Administration-Console-Handle-Remote-Code-Execution.html
https://www.oracle.com/security-alerts/alert-cve-2020-14750.html