CVE-2020-2967: 
Oracle WebLogic Server vulnerability analysis and mitigation

CVE-2020-2967 is a vulnerability in the Oracle WebLogic Server Web Services component. The vulnerability was disclosed in July 2020 and affects multiple versions including 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. This is an easily exploitable vulnerability that allows unauthenticated attackers with network access via IIOP or T3 protocols to compromise the server (Oracle Advisory).

The vulnerability has a CVSS Base Score of 7.5, indicating a high severity rating. It can be exploited through network access via IIOP and T3 protocols, requiring no authentication or special privileges. The vulnerability exists in the Web Services component of Oracle WebLogic Server (Oracle Advisory).

A successful exploitation of this vulnerability could result in a complete compromise of Oracle WebLogic Server. Given the CVSS score and attack vector, this vulnerability poses a significant risk to affected systems, especially those exposed to untrusted networks (Oracle Advisory).

The vulnerability is considered easily exploitable by unauthenticated attackers who have network access through IIOP or T3 protocols. No special conditions or user interaction is required for exploitation (Oracle Advisory).

Oracle released patches for this vulnerability as part of the July 2020 Critical Patch Update. Organizations running affected versions of WebLogic Server should apply the security patches immediately. The fix is available for versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 (Oracle Advisory).