VULNERABILITY INTELLIGENCE

CVE-2020-2555

CVSS score9.8 CRITICAL
EPSS probability97.12%
CISA KEVKnown exploited vulnerability
Published2020-01-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Oracle Multiple Products Remote Code Execution Vulnerability

Vendor / product: Oracle / Multiple Products

Description

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Weakness classification

  • nvd@nist.gov: CWE-502
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-502

Primary references