CVE-2020-14557: 
Oracle WebLogic Server vulnerability analysis and mitigation

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container) affects versions 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. The vulnerability requires human interaction from a person other than the attacker (Oracle Advisory).

The vulnerability has a CVSS 3.1 Base Score of 6.8 (Confidentiality and Integrity impacts) with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N. This indicates a network-accessible vulnerability with high attack complexity, requiring no privileges but user interaction, with potential high impacts on confidentiality and integrity (NVD).

Successful exploitation of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data, as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data (NVD).

The vulnerability is considered difficult to exploit and requires human interaction from a person other than the attacker. It requires network access via HTTP for an unauthenticated attacker to attempt exploitation (Oracle Advisory).

Oracle has released security patches for affected versions (12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0) as part of the July 2020 Critical Patch Update. Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible (Oracle Advisory).