According to information from security researchers at the SANS Internet Storm Center (ISC), attackers are currently preparing attacks on Oracle WebLogic Server. In doing so, they are targeting a security hole classified as ” critical “. Patches are already available.

The vulnerability (CVE – 2020 – 14882) should be comparatively easy to exploit, according to a contribution by SANS ISC. If attacks are successful, attackers could completely compromise servers and gain full control.

Attacks are likely to be imminent The WebLogic server versions 10. 3.6.0.0, 12. 1.3.0.0, 12. 2.1.3.0, 12. 2.1.4.0 and 14. 1.1.0.0 affected. Oracle has released security updates in the course of its quarterly Critical Patch Update.

The security researchers state that attackers currently only scan for vulnerable servers. It can be assumed that attacks will occur soon.

(des)