CVE-2020-14859: 
Oracle WebLogic Server vulnerability analysis and mitigation

CVE-2020-14859 is a critical vulnerability in Oracle WebLogic Server's Core component. The vulnerability was disclosed in Oracle's October 2020 Critical Patch Update. This easily exploitable vulnerability allows unauthenticated attackers with network access via IIOP or T3 protocols to compromise Oracle WebLogic Server. The vulnerability affects WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 (Oracle CPU).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (Critical) with the vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The specific flaw exists within the handling of the T3 protocol. Crafted data in a T3 protocol message can trigger the deserialization of untrusted data (ZDI Advisory).

A successful exploitation of this vulnerability can result in complete takeover of the Oracle WebLogic Server. An attacker can leverage this vulnerability to execute code in the context of the service account, potentially gaining full control over the affected system (ZDI Advisory).

The vulnerability is classified as 'easily exploitable' and requires no authentication for an attacker with network access via IIOP or T3 protocols. The attack vector is network-accessible and requires no user interaction or special privileges to exploit (Oracle CPU, Tenable Blog).

Oracle has released patches to address this vulnerability in their October 2020 Critical Patch Update. Organizations are strongly advised to apply the security patches as soon as possible. The patches are available for all affected versions of WebLogic Server (Oracle CPU).