CVE-2020-14883VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-14883: Oracle WebLogic Server Unspecified Vulnerability

Affects Oracle WebLogic ServerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 97.7% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-14883 (opens in a new tab)

Description

CVE-2020-14883 is an unspecified vulnerability in the Console component of Oracle WebLogic Server. It impacts confidentiality, integrity, and availability with high severity. The vulnerability has been exploited in the wild. No specific affected versions or detailed technical information are provided.

Summary

Oracle WebLogic Server contains an unspecified vulnerability in its Console component that affects confidentiality, integrity, and availability. The exact nature of the vulnerability is not detailed in the available information. It is known to be exploited in the wild, indicating active threat use. No patch or remediation details are provided, and no affected versions are explicitly stated.

Impact

The vulnerability impacts the confidentiality, integrity, and availability of Oracle WebLogic Server environments. Exploitation in the wild confirms active threat actors are leveraging this issue. The unspecified nature of the vulnerability prevents precise impact characterization beyond the stated high severity.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of explicit patch information, users should monitor Oracle's official advisories for updates and apply any available fixes promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:56:54 UTC

References

Related threats