漏洞描述
Oracle WebLogic Server contains an easily exploitable remote command execution vulnerability which allows unauthenticated attackers with network access via HTTP to compromise the server.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
testbnull.medium.comhttps://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf↗www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html↗twitter.comhttps://twitter.com/jas502n/status/1321416053050667009↗youtu.behttps://youtu.be/JFVDOIL0YtA↗github.comhttps://github.com/jas502n/CVE-2020-14882#eg↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-14882↗