CVE-2020-2551: Oracle WebLogic Server - Remote Code Execution

HoneyLabs honeypots recorded 1 probe matching CVE-2020-2551 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2023-11-16.

What the sensors show

All of them arrived on one day, 2026-11-02. It is still being probed 2 years after CISA added it to the Known Exploited Vulnerabilities list. Over the last 90 days the sensors recorded 68 probes for it.

Request paths that identify it

  • /console/login/LoginForm.jsp

Addresses probing it

Source IPProbesNetworkCountry
66.92.21.2001Psychz NetworksUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS40676Psychz Networks11

Where it comes from

CountryProbes
United States1

Captured requests

  • /console/login/LoginForm.jsp

HTTP client fingerprints

  • b11cun050_0004001e_00ecc3a8

CVE report

Open a specific CVE from the CVE tracker.