Skip to content
THREATWIRE

CVE Tracker

CVE-2020-14883

Oracle WebLogic Server Unspecified Vulnerability

IN CISA KEV

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.

Vendor
Oracle
Product
WebLogic Server
CVSS
No score recorded (no NVD record loaded for this entry)
CWE
Not recorded
Published
Not recorded
NVD modified
Not recorded

CISA KEV

Date added
2021-11-03
Due date
2022-05-03
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.

EPSS

97.7% chance of exploitation in the next 30 days (percentile 99th)

FIRST EPSS, updated 17 Oct 2026. About EPSS

CVSS is severity, EPSS is likelihood, KEV means already exploited. EPSS is a statistical probability, not a certainty: a low score does not make a bug safe, and a high one does not prove it is being exploited.

Data last updated 18 Oct 2026. Sources: NVD API 2.0, CISA KEV catalog, FIRST EPSS. Links: NVD, CISA KEV. Metadata only. ThreatWire does not host exploit code.