CVE-2020-2555 : Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Published 2020-01-15 17:15:17

Updated 2024-10-02 14:24:51

Source Oracle

View at NVD, CVE.org

Products affected by CVE-2020-2555

Oracle » Commerce Platform
Versions from including (>=) 11.3.0 and up to, including, (<=) 11.3.2
cpe:2.3:a:oracle:commerce_platform:*:*:*:*:*:*:*:*
Matching versions
Oracle » Commerce Platform » Version: 11.0.0
cpe:2.3:a:oracle:commerce_platform:11.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Commerce Platform » Version: 11.1.0
cpe:2.3:a:oracle:commerce_platform:11.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Commerce Platform » Version: 11.2.0
cpe:2.3:a:oracle:commerce_platform:11.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Access Manager » Version: 11.1.2.3.0
cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Webcenter Portal » Version: 12.2.1.3.0
cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Webcenter Portal » Version: 12.2.1.4.0
cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Diameter Signaling Router
Versions from including (>=) 8.0.0 and up to, including, (<=) 8.2.2
cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Assortment Planning » Version: 15.0
cpe:2.3:a:oracle:retail_assortment_planning:15.0:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Assortment Planning » Version: 16.0
cpe:2.3:a:oracle:retail_assortment_planning:16.0:*:*:*:*:*:*:*
Matching versions
Oracle » Utilities Framework
Versions from including (>=) 4.3.0.1.0 and up to, including, (<=) 4.3.0.6.0
cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*
Matching versions
Oracle » Utilities Framework » Version: 4.2.0.2.0
cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Utilities Framework » Version: 4.2.0.3.0
cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Utilities Framework » Version: 4.4.0.0.0
cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Utilities Framework » Version: 4.4.0.2.0
cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Rapid Planning » Version: 12.1
cpe:2.3:a:oracle:rapid_planning:12.1:*:*:*:*:*:*:*
Matching versions
Oracle » Rapid Planning » Version: 12.2
cpe:2.3:a:oracle:rapid_planning:12.2:*:*:*:*:*:*:*
Matching versions
Oracle » Coherence » Version: 3.7.1.0
cpe:2.3:a:oracle:coherence:3.7.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Coherence » Version: 12.1.3.0.0
cpe:2.3:a:oracle:coherence:12.1.3.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Coherence » Version: 12.2.1.3.0
cpe:2.3:a:oracle:coherence:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Coherence » Version: 12.2.1.4.0
cpe:2.3:a:oracle:coherence:12.2.1.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Data Repository » Version: 7.0.1
cpe:2.3:a:oracle:healthcare_data_repository:7.0.1:*:*:*:*:*:*:*
Matching versions

CVE-2020-2555 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Oracle Multiple Products Remote Code Execution Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Pla

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2020-2555

Added on 2021-11-03 Action due date 2022-05-03

Exploit prediction scoring system (EPSS) score for CVE-2020-2555

EPSS FAQ

96.67%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2020-2555

WebLogic Server Deserialization RCE - BadAttributeValueExpException

Disclosure Date: 2020-01-15

First seen: 2020-05-21

exploit/multi/misc/weblogic_deserialize_badattrval

There exists a Java object deserialization vulnerability in multiple versions of WebLogic. Unauthenticated remote code execution can be achieved by sending a serialized BadAttributeValueExpException object over the T3 protocol to vulnerable WebLogi

More information

CVSS scores for CVE-2020-2555

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Oracle
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-2555

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2020-2555

https://www.oracle.com/security-alerts/cpujan2020.html

Oracle Critical Patch Update Advisory - January 2020
Vendor Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2020.html

Oracle Critical Patch Update Advisory - October 2020
Patch;Vendor Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpujul2020.html

Oracle Critical Patch Update Advisory - July 2020
Vendor Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpujan2021.html

Oracle Critical Patch Update Advisory - January 2021
Vendor Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpujul2021.html

Oracle Critical Patch Update Advisory - July 2021
Patch;Vendor Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/157795/WebLogic-Server-Deserialization-Remote-Code-Execution.html

WebLogic Server Deserialization Remote Code Execution ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
http://packetstormsecurity.com/files/157207/Oracle-WebLogic-Server-12.2.1.4.0-Remote-Code-Execution.html

Oracle WebLogic Server 12.2.1.4.0 Remote Code Execution ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
http://packetstormsecurity.com/files/157054/Oracle-Coherence-Fusion-Middleware-Remote-Code-Execution.html

Oracle Coherence Fusion Middleware Remote Code Execution ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2020-2555