{"id":11985,"date":"2020-11-16T00:22:18","date_gmt":"2020-11-16T00:22:18","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=11985"},"modified":"2026-04-17T18:07:47","modified_gmt":"2026-04-17T18:07:47","slug":"weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/","title":{"rendered":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution"},"content":{"rendered":"<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body><h2 class=\"wp-block-heading\">Overview<\/h2>\n\n\n\n<p>The Critical Patch Update (CPU) for October 2020 released by Oracle contains a high-risk WebLogic Consoleremote code execution vulnerability (CVE-2020-14882).<\/p>\n\n\n\n<p>The vulnerability can be triggered without authentication and has an extensive impact.<\/p>\n\n\n\n<p>Unauthenticated attackers might construct special HTTP GET requests to exploit this vulnerability to execute arbitrary code on the affected WebLogic Server.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>According to Oracle, the CVSS base score of this vulnerability is 9.8.<\/p>\n\n\n\n<p>For details about the Oracle CPU, please visit the following link:<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/www.oracle.com\/security-alerts\/cpuoct2020.html\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Affected Versions<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Oracle Weblogic Server 10.3.6.0.0<\/li><li>Oracle Weblogic Server 12.1.3.0.0<\/li><li>Oracle Weblogic Server 12.2.1.3.0<\/li><li>Oracle Weblogic Server 12.2.1.4.0<\/li><li>Oracle Weblogic Server 14.1.1.0.0<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Technical Solutions<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Official Fix<\/h3>\n\n\n\n<p>The Oracle CPU has released patches to fix the preceding vulnerability. Affected users are advised to download and install the patches as soon as possible.<\/p>\n\n\n\n<p>Note: Official patches of Oracle can be downloaded only by those with a licensed account of the software. Such users can use that account to log in to <a href=\"https:\/\/support.oracle.com\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>https:\/\/support.oracle.com<\/strong><\/a> to obtain the latest patches.<strong><\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">NSFOCUS&#8217;s Recommendations<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Using NSFOCUS&#8217;s Detection Products or Services<\/strong><\/li><\/ul>\n\n\n\n<p>For intranet assets, use NSFOCUS Intrusion Detection System (NIDS) and Unified Threat Sensor (UTS) to check for the vulnerability:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>NSFOCUS Intrusion Detection System (NIDS)<strong><\/strong><\/li><\/ul>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/listIds\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/bsaUtsIndex\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Upgrade Package\/Rule Base Versions of Detection Products<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Detection Product<\/strong><\/td><td><strong>Upgrade Package\/Rule Base Version<\/strong><\/td><\/tr><tr><td><strong>IDS<\/strong><strong><\/strong><\/td><td>5.6.10.23802, 5.6.9.23802<\/td><\/tr><tr><td><strong>UTS<\/strong><strong><\/strong><\/td><td>5.6.10.23802<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>NIDS upgrade package download link:<\/li><\/ul>\n\n\n\n<p>5.6.10.23802<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109611\n<\/div><\/figure>\n\n\n\n<p>5.6.9.23802<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109610\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>UTS upgrade package download link:<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109641\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Using NSFOCUS&#8217;s Protection Products to Detect the Vulnerability<\/strong><\/li><\/ul>\n\n\n\n<p>Use NSFOCUS protection products, such as NSFOCUS Intrusion Protection System (NIPS), Web Application Firewall (WAF), and Next-Generation Firewall (NF), to defend against the vulnerability.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>NSFOCUS Intrusion Protection System (NIPS)<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/listIps\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Web Application Firewall (WAF)<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/wafIndex\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Next-Generation Firewall (NF)<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/listNf\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Upgrade Package\/Rule Base Versions of Protection Products<\/strong><\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Protection Product<\/strong><\/td><td><strong>Upgrade Package\/Rule Base Version<\/strong><\/td><td><strong>Rule ID<\/strong><\/td><\/tr><tr><td><strong>IPS<\/strong><strong><\/strong><\/td><td>5.6.10.23802, 5.6.9.23802<\/td><td>25079<\/td><\/tr><tr><td><strong>WAF<\/strong><strong><\/strong><\/td><td>6.0.7.1.46624, 6.0.7.0.46624<\/td><td>27526197<\/td><\/tr><tr><td><strong>NF<\/strong><strong><\/strong><\/td><td>6.0.2.832, 6.0.1.832<\/td><td>25079<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>NIPS upgrade package download link:<\/li><\/ul>\n\n\n\n<p>5.6.10.23802<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109611\n<\/div><\/figure>\n\n\n\n<p>5.6.9.23802<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109610\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>WAF upgrade package download link:<\/li><\/ul>\n\n\n\n<p>6.0.7.1.46624<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109607\n<\/div><\/figure>\n\n\n\n<p>6.0.7.0.46624<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109608\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>NF upgrade package download link:<\/li><\/ul>\n\n\n\n<p>6.0.2.832<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109629\n<\/div><\/figure>\n\n\n\n<p>6.0.1.832<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp:\/\/update.nsfocus.com\/update\/downloads\/id\/109628\n<\/div><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Security Platforms<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Platform<\/strong><\/td><td><strong>Upgrade Package\/Rule Base Version<\/strong><\/td><\/tr><tr><td><strong>NSFOCUS Intelligent Security Operation Platform (ISOP)<\/strong><\/td><td>Alerts have been generated for the vulnerability.<\/td><\/tr><tr><td><strong>NSFOCUS Threat Analysis and Management Platform (TAM)<\/strong><\/td><td>Rules are available to protect against the vulnerability.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Appendix A: Product Use Guides<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Protection Configuration on NIPS<\/strong><\/li><\/ul>\n\n\n\n<p>On NIPS, under <strong>System &gt; System Update &gt; Offline Update<\/strong>, browse to the update file just downloaded and click <strong>Upload<\/strong>.<\/p>\n\n\n\n<p>After the update is installed, find the rule by ID in the default rule base and view rule details.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"885\" height=\"376\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-2-1.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-11988\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-2-1.jpg 885w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-2-1-300x127.jpg 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-2-1-768x326.jpg 768w\" sizes=\"(max-width: 885px) 100vw, 885px\" \/><\/figure><\/div>\n\n\n\n<p><strong>Note: After the update is installed, the engine automatically restarts to make it take effect, which does not disconnect any sessions, but may cause the loss of three to five packets during ping operations. Therefore, it is recommended that the update be installed at an appropriate time.<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Protection Configuration on WAF<\/strong><\/li><\/ul>\n\n\n\n<p>On WAF, choose <strong>System Management &gt; System Tools &gt; Rule Upgrade<\/strong>.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"554\" height=\"226\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-3.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-11989\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-3.jpg 554w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-3-300x122.jpg 300w\" sizes=\"(max-width: 554px) 100vw, 554px\" \/><\/figure><\/div>\n\n\n\n<p>Under <strong>Manual Upgrade<\/strong>, browse to the upgrade package and click <strong>Submit<\/strong>.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Protection Configuration on NF<\/strong><\/li><\/ul>\n\n\n\n<p>On the web-based manager of NSFOCUS NF, under <strong>System &gt; System Upgrade &gt; Offline Upgrade<\/strong>, browse to the update file and click <strong>Upload<\/strong>.<\/p>\n\n\n\n<p>Wait for the installation to complete.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Statement<\/h2>\n\n\n\n<p>This advisory is only used to describe a potential risk. NSFOCUS does not provide any commitment or promise on this advisory. NSFOCUS and the author will not bear any liability for any direct and\/or indirect consequences and losses caused by transmitting and\/or using this advisory. NSFOCUS reserves all the rights to modify and interpret this advisory. Please include this statement paragraph when reproducing or transferring this advisory. Do not modify this advisory, add\/delete any information to\/from it, or use this advisory for commercial purposes without permission from NSFOCUS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About NSFOCUS<\/h2>\n\n\n\n<p>NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks. The company&#8217;s Intelligent Hybrid Security strategy utilizes both cloud and on-premises security platforms, built on a foundation of real-time global threat intelligence, to provide multi-layered, unified and dynamic protection against advanced cyber attacks.<\/p>\n\n\n\n<p>NSFOCUS works with Fortune Global 500 companies, including four of the world&#8217;s five largest financial institutions, organizations in insurance, retail, healthcare, critical infrastructure industries as well as government agencies. NSFOCUS has technology and channel partners in more than 60 countries, is a member of both the Microsoft Active Protections Program (MAPP), and the Cloud Security Alliance (CSA).<\/p>\n\n\n\n<p>A wholly owned subsidiary of NSFOCUS Technologies Group Co., Ltd., the company has operations in the Americas, Europe, the Middle East and Asia Pacific.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"<p>Overview The Critical Patch Update (CPU) for October 2020 released by Oracle contains a high-risk WebLogic Consoleremote code execution vulnerability (CVE-2020-14882). The vulnerability can be triggered without authentication and has an extensive impact. Unauthenticated attackers might construct special HTTP GET requests to exploit this vulnerability to execute arbitrary code on the affected WebLogic Server.<\/p>\n","protected":false},"author":1,"featured_media":11986,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[6],"tags":[742],"class_list":["post-11985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-emergency-response","tag-weblogic"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"Overview The Critical Patch Update (CPU) for October 2020 released by Oracle contains a high-risk WebLogic Consoleremote code execution vulnerability\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-16T00:22:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T18:07:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg\" \/>\n<meta name=\"author\" content=\"NSFOCUS\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"Overview The Critical Patch Update (CPU) for October 2020 released by Oracle contains a high-risk WebLogic Consoleremote code execution vulnerability\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"NSFOCUS\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/\"},\"author\":{\"name\":\"NSFOCUS\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution\",\"datePublished\":\"2020-11-16T00:22:18+00:00\",\"dateModified\":\"2026-04-17T18:07:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/\"},\"wordCount\":827,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/1116-1.jpg\",\"keywords\":[\"WebLogic\"],\"articleSection\":[\"Emergency Response\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/\",\"name\":\"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/1116-1.jpg\",\"datePublished\":\"2020-11-16T00:22:18+00:00\",\"dateModified\":\"2026-04-17T18:07:47+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/1116-1.jpg\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/1116-1.jpg\",\"width\":650,\"height\":361,\"caption\":\"Oracle logo on red geometric background.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"NSFOCUS\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"NSFOCUS\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/","og_locale":"pt_BR","og_type":"article","og_title":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS","og_description":"Overview The Critical Patch Update (CPU) for October 2020 released by Oracle contains a high-risk WebLogic Consoleremote code execution vulnerability","og_url":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/","og_site_name":"NSFOCUS","article_published_time":"2020-11-16T00:22:18+00:00","article_modified_time":"2026-04-17T18:07:47+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg","type":"","width":"","height":""}],"author":"NSFOCUS","twitter_card":"summary_large_image","twitter_title":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS","twitter_description":"Overview The Critical Patch Update (CPU) for October 2020 released by Oracle contains a high-risk WebLogic Consoleremote code execution vulnerability","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg","twitter_misc":{"Escrito por":"NSFOCUS","Est. tempo de leitura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/"},"author":{"name":"NSFOCUS","@id":"https:\/\/nsfocusglobal.com\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution","datePublished":"2020-11-16T00:22:18+00:00","dateModified":"2026-04-17T18:07:47+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/"},"wordCount":827,"commentCount":0,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg","keywords":["WebLogic"],"articleSection":["Emergency Response"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/","url":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/","name":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg","datePublished":"2020-11-16T00:22:18+00:00","dateModified":"2026-04-17T18:07:47+00:00","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/11\/1116-1.jpg","width":650,"height":361,"caption":"Oracle logo on red geometric background."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/weblogic-console-http-remote-code-execution-vulnerability-cve-2020-14882-protection-solution\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"WebLogic Console HTTP Remote Code Execution Vulnerability (CVE-2020-14882) Protection Solution"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/#website","url":"https:\/\/nsfocusglobal.com\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"NSFOCUS","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"NSFOCUS"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/11985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=11985"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/11985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/11986"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=11985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=11985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=11985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}