{"metadata": {"vulnerability": "CVE-2020-2883", "count": 92, "kinds": {"milestone": 5, "sighting": 58, "kev": 11, "other": 18}}, "data": [{"timestamp": "2019-12-10T00:00:00Z", "date_only": false, "value": "2019-12-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-2883", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-04-15T04:00:00Z", "date_only": false, "value": "2020-04-15T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=469", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "815d4297-fd3c-49df-8a97-e4e1899a21c9", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=469"}, {"timestamp": "2020-04-15T13:29:50Z", "date_only": false, "value": "2020-04-15T13:29:50.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-2883", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-04-15T14:15:00Z", "date_only": false, "value": "2020-04-15T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9X8Q-P3QP-R24W", "record": "GHSA-9X8Q-P3QP-R24W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-04-15T14:15:00Z", "date_only": false, "value": "2020-04-15T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-2883", "record": "GSD-2020-2883", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-04-15T14:15:33.513Z", "date_only": false, "value": "2020-04-15T14:15:33.513", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2883", "record": "FKIE_CVE-2020-2883", "field": "published"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": true, "value": "2020-04-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-23015", "record": "CNVD-2020-23015", "field": "openTime"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": true, "value": "2020-04-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-23015", "record": "CNVD-2020-23015", "field": "submitTime"}, {"timestamp": "2020-05-01T17:05:46Z", "date_only": false, "value": "2020-05-01T17:05:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/37471", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "880fbd75-9084-46d7-a3d3-971a9d421d1b", "content": "Oracle Says Hackers Targeting Recently Patched Vulnerabilities\nhttp://feedproxy.google.com/~r/Securityweek/~3/A2quUqAB5mA/oracle-says-hackers-targeting-recently-patched-vulnerabilities\n\nOracle warned customers on Thursday that threat actors have been spotted attempting to exploit multiple recently patched vulnerabilities, including a critical WebLogic Server flaw tracked as CVE-2020-2883.\nread more (https://www.securityweek.com/oracle-says-hackers-targeting-recently-patched-vulnerabilities)", "url": "https://t.me/information_security_channel/37471"}, {"timestamp": "2020-05-02T06:07:50Z", "date_only": false, "value": "2020-05-02T06:07:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/37481", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7d33b166-3950-49f4-ad6d-9a5c506342b4", "content": "Oracle warned that hackers actively attempting to exploit recently patched vulnerability CVE-2020-2883, which affects multiple versions of Oracle WebLogic Server. Oracle patched the vulnerability as a part of the April 2020 Critical Patch Update which resolves more than 405 vulnerabilities, including CVE-2020-2883. WebLogic Server Flaw \u2013 CVE-2020-2883 The vulnerability allows attackers to execute arbitrary code [\u2026]\nThe post Oracle Warns Active Exploitation of Recently Patched WebLogic RCE Flaw (https://gbhackers.com/oracle-weblogic-rce-flaw/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/37481"}, {"timestamp": "2020-05-02T11:46:14Z", "date_only": false, "value": "2020-05-02T11:46:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittista-oracle-weblogic-server-palvelinohjelmiston-haavoittuvuutta-hyvaksikaytetaan", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "420dc830-47a5-4ff1-8b0f-5ece5b690a51", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittista-oracle-weblogic-server-palvelinohjelmiston-haavoittuvuutta-hyvaksikaytetaan"}, {"timestamp": "2020-05-04T17:12:22Z", "date_only": false, "value": "2020-05-04T17:12:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/11798", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4853366b-74ae-421d-9261-e8e5111ea5c9", "content": "\u274c Oracle: Unpatched Versions of WebLogic App Server Under Active Attack \u274c\n\nCVE-2020-2883 was patched in Oracle's April 2020 Critical Patch Update - but proof of concept exploit code was published shortly after.\n\n\ud83d\udcd6 Read\n\nvia \"Threatpost\".", "url": "https://t.me/cibsecurity/11798"}, {"timestamp": "2020-05-04T17:28:14Z", "date_only": false, "value": "2020-05-04T17:28:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Cybersecuritylb/277", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "bee9aa14-d8a6-4689-91ca-e74faf89ad64", "content": "Oracle: Unpatched Versions of WebLogic App Server Under Active Attack\nhttps://threatpost.com/oracle-unpatched-versions-of-weblogic-app-server-under-active-attack/155420/\n\nCVE-2020-2883 was patched in Oracle's April 2020 Critical Patch Update - but proof of concept exploit code was published shortly after.", "url": "https://t.me/Cybersecuritylb/277"}, {"timestamp": "2020-05-12T00:13:56Z", "date_only": false, "value": "2020-05-12T00:13:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/techpwnews/630", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "d2193166-2ff6-47b6-b085-431b3b88ed6d", "content": "Details on the Oracle WebLogic Vulnerability Being Exploited in the Wild\n\nEarlier this year, I blogged about a deserialization vulnerability in the Oracle WebLogic Server. This was patched by Oracle and assigned CVE-2020-2555. However, researcher Quynh Le of VNPT ISC submitted a bug to the ZDI that showed how the patch could be bypassed. This bug, labeled CVE-2020-2883, is now being reported by Oracle as being used in active attacks. In this blog post, we will go through the details of this recently...\n\nContinue reading at Zero Day Initiative - Blog", "url": "https://t.me/techpwnews/630"}, {"timestamp": "2020-06-04T01:03:57Z", "date_only": false, "value": "2020-06-04T01:03:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize_badattr_extcomp.rb", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "72a88a2b-5325-43b4-95e9-69e0ba28a88a", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize_badattr_extcomp.rb"}, {"timestamp": "2020-06-04T21:06:10Z", "date_only": false, "value": "2020-06-04T21:06:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "CVE-2020-2883", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-27T21:09:01Z", "date_only": false, "value": "2021-03-27T21:09:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reconshell/599", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5f48e0f3-5473-4dc0-98ae-298e487bda4e", "content": "Weblogic-Framework best tool for detecting weblogic vulnerabilities\n\n#vulnerabilities #weblogic #vulnerability \n#CVE-2020-2883 #CVE-2020-2555 #CVE-2020-2551\n\nhttps://upurl.me/rltsw", "url": "https://t.me/reconshell/599"}, {"timestamp": "2022-05-24T17:15:05Z", "date_only": false, "value": "2022-05-24T17:15:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9X8Q-P3QP-R24W", "record": "GHSA-9X8Q-P3QP-R24W", "field": "published"}, {"timestamp": "2022-10-14T18:23:00Z", "date_only": false, "value": "2022-10-14T18:23Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-2883", "record": "GSD-2020-2883", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-03-13T22:21:06Z", "date_only": false, "value": "2023-03-13T22:21:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/7921", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "b6325b3d-d1b1-431b-9447-2f7c62330c14", "content": "#exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro &lt; 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC", "url": "https://t.me/CyberSecurityTechnologies/7921"}, {"timestamp": "2023-03-14T09:24:23Z", "date_only": false, "value": "2023-03-14T09:24:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5T9p9Zashh8_t2QaMEcrWCxGmV69ND__6VmH0ET2CJ3Gp-A", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "cb210055-01a8-4b8a-ba7d-12e5acb72448"}, {"timestamp": "2023-11-10T15:34:11Z", "date_only": false, "value": "2023-11-10T15:34:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1479", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "10df09ca-350e-4e72-b2c0-b9b7953bd717", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09\n\n#github #tools #exploit", "url": "https://t.me/CNArsenal/1479"}, {"timestamp": "2023-11-11T07:49:11Z", "date_only": false, "value": "2023-11-11T07:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/301", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5ede650b-93dd-4435-ac93-87788bc505ca", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09", "url": "https://t.me/v3n0mhack/301"}, {"timestamp": "2023-12-13T01:21:50.952Z", "date_only": false, "value": "2023-12-13T01:21:50.952902Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-2883", "record": "GSD-2020-2883", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T12:48:33Z", "date_only": false, "value": "2023-12-18T12:48:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1987", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "51d5b3c1-fbcb-45df-a82c-90ac22499c19", "content": "#ExploitObserverAlert\n\nCVE-2020-2883\n\nDESCRIPTION: Exploit Observer has 90 entries related to CVE-2020-2883. Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\nFIRST-EPSS: 0.975160000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1987"}, {"timestamp": "2024-08-04T07:23:58.874Z", "date_only": false, "value": "2024-08-04T07:23:58.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-2883", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T16:44:02Z", "date_only": false, "value": "2024-10-23T16:44:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1103", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "2e36256c-86cd-4e26-a218-e7ea112d9963", "content": "#exploit\n1. CVE-2020-12116:\nPoC code to exploit - Unauth arbitrary file read on ManageEngine OpManger\nhttps://github.com/BeetleChunks/CVE-2020-12116\n\n2. CVE-2020-2883:\nOracle WebLogic Server RCE Vulnerability\nhttps://github.com/Y4er/CVE-2020-2883\n]-&gt; Research:\nhttps://www.zerodayinitiative.com/blog/2020/5/8/details-on-the-oracle-weblogic-vulnerability-being-exploited-in-the-wild", "url": "https://t.me/CyberSecurityTechnologies/1103"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "timestamps.asserted_at", "uuid": "51641f7d-4af9-42d2-82a5-320867263ea2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-2883", "field": "timestamps.asserted_at", "uuid": "13b40c34-5086-4150-9f19-07475341daf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-2883", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-2883", "field": "evidence.0.details.added_date", "uuid": "13b40c34-5086-4150-9f19-07475341daf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "evidence.0.details.date_added", "uuid": "51641f7d-4af9-42d2-82a5-320867263ea2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "timestamps.first_seen_at", "uuid": "51641f7d-4af9-42d2-82a5-320867263ea2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-2883", "field": "timestamps.first_seen_at", "uuid": "13b40c34-5086-4150-9f19-07475341daf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "status.status_updated_at", "uuid": "51641f7d-4af9-42d2-82a5-320867263ea2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-2883", "field": "status.status_updated_at", "uuid": "13b40c34-5086-4150-9f19-07475341daf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T15:54:44.594Z", "date_only": false, "value": "2025-01-07T15:54:44.594391Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "a36e294d-c6a0-45d3-a31e-e135247af000", "url": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332"}, {"timestamp": "2025-01-07T16:08:10.148Z", "date_only": false, "value": "2025-01-07T16:08:10.148787Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113787934452940129", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "9cc65af0-9446-494a-aae6-98942b334144", "url": "https://infosec.exchange/users/screaminggoat/statuses/113787934452940129"}, {"timestamp": "2025-01-07T16:19:30.105Z", "date_only": false, "value": "2025-01-07T16:19:30.105766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "3bd62bcd-ffb5-4626-aba4-f276ee3f348a", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f"}, {"timestamp": "2025-01-07T16:19:31.075Z", "date_only": false, "value": "2025-01-07T16:19:31.075054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "ea9fb091-f4d5-4a00-a481-6978c400404e", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f"}, {"timestamp": "2025-01-07T17:39:53Z", "date_only": false, "value": "2025-01-07T17:39:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/484", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7e634b62-6dba-434e-86c6-360a3743a812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-2883\n\ud83d\udd39 Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\ud83d\udccf Published: 2020-04-15T13:29:50\n\ud83d\udccf Modified: 2025-01-07T17:20:22.677Z\n\ud83d\udd17 References:\n1. https://www.oracle.com/security-alerts/cpuapr2020.html\n2. https://www.zerodayinitiative.com/advisories/ZDI-20-504/\n3. https://www.zerodayinitiative.com/advisories/ZDI-20-570/\n4. http://packetstormsecurity.com/files/157950/WebLogic-Server-Deserialization-Remote-Code-Execution.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/484"}, {"timestamp": "2025-01-07T17:56:49.610Z", "date_only": false, "value": "2025-01-07T17:56:49.610246Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7c21550d-c358-4606-a492-ada9e9d6c2a2", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23"}, {"timestamp": "2025-01-07T18:10:02Z", "date_only": false, "value": "2025-01-07T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "78b18b32-862b-43d5-91de-2ab7ef60f35f"}, {"timestamp": "2025-01-07T18:52:12.886Z", "date_only": false, "value": "2025-01-07T18:52:12.886702Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3049071", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "74c20278-8c17-467d-b4ea-8f5b59b70802", "url": "https://feedsin.space/feed/CISAKevBot/items/3049071"}, {"timestamp": "2025-01-07T19:04:17.957Z", "date_only": false, "value": "2025-01-07T19:04:17.957162Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f20d0bef-9604-4260-98f0-110a62f1b62b", "url": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w"}, {"timestamp": "2025-01-07T20:02:08.191Z", "date_only": false, "value": "2025-01-07T20:02:08.191816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw5gwnj2o", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "185faa97-6066-46ce-92dd-69977da6d655", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw5gwnj2o"}, {"timestamp": "2025-01-08T00:28:16.128Z", "date_only": false, "value": "2025-01-08T00:28:16.128667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "a4772bcb-83e6-486c-a5e7-cf2266b77d87", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f"}, {"timestamp": "2025-01-08T05:58:16Z", "date_only": false, "value": "2025-01-08T05:58:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6126", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "9c323b4e-c259-4d9a-987b-1b038b83e7ef", "content": "CISA has flagged 3 actively exploited vulnerabilities\u2014two in Mitel MiCollab and one in Oracle WebLogic Server. \n \n\u2937 CVE-2024-41713: Remote access via path traversal. \n\u2937 CVE-2024-55550: Exploited by attackers with admin privileges. \n\u2937 CVE-2020-2883: A high-severity vulnerability in Oracle WebLogic with known exploits. \n \n\ud83d\udc49 Don\u2019t wait\u2014secure your systems now: https://thehackernews.com/2025/01/cisa-flags-critical-flaws-in-mitel-and.html", "url": "https://t.me/thehackernews/6126"}, {"timestamp": "2025-01-08T11:50:53.002Z", "date_only": false, "value": "2025-01-08T11:50:53.002090Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/113792585077913343", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f2d0efb9-1ae0-4855-988b-d2c14164d00d", "url": "https://infosec.exchange/users/tomcat/statuses/113792585077913343"}, {"timestamp": "2025-01-08T12:25:03.531Z", "date_only": false, "value": "2025-01-08T12:25:03.531499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4b8721a2-240f-460c-8f12-0b40e7156d17", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a"}, {"timestamp": "2025-01-08T15:19:09.659Z", "date_only": false, "value": "2025-01-08T15:19:09.659882Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4ac946eb-dbc3-4ca0-885d-4c78cdacafd4", "url": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z"}, {"timestamp": "2025-01-09T10:41:33Z", "date_only": false, "value": "2025-01-09T10:41:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1580", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f0589786-f692-4408-b630-ee4ef1832ee2", "content": "\ud83e\ude79 Welcome back and Patch now!\n\n\u0425\u043e\u0442\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0442\u043e\u0436\u0435 \u0431\u0435\u0440\u0443\u0442 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043d\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u041d\u043e\u0432\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0420\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0430, \u0434\u0440\u0443\u0433\u0438\u0435 \u0432 \u044d\u0442\u043e\u0442 \u043f\u0435\u0440\u0438\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f. \u0417\u0430 \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043d\u0438\u043a\u0443\u043b \u043d\u0430\u0431\u0440\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445.\n\nSonicWall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0438\u043a\u0441 SonicOS, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 CVE-2024-53704 (CVSS 8.2), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SSL VPN \u0438 SSH. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u00ab\u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\u00bb (susceptible to actual exploitation), \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u043a\u0430\u043a \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0443 exploitability, \u0438 \u043a\u0430\u043a \u0437\u0430\u0432\u0443\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u0438\u0440\u043e\u0434\u0435\u0439. \n\u041a\u0440\u043e\u043c\u0435 \u043f\u0430\u0442\u0447\u0430, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u044b \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043e SSH.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f CVE-2024-52875, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 GFI KerioControl, \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0412 \u0421\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0431\u043e\u043b\u0435\u0435 23 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 KerioControl.\n\n\u0410 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u044c\u043d\u0430\u044f Ivanti \u0443\u0441\u043f\u0435\u043b\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c\u0441\u044f \u0432 2025 \u0433\u043e\u0434\u0443 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c. CVE-2025-0282 (CVSS 9.0) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0438\u0447\u044c RCE \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Connect Secure. \u0422\u043e\u0442 \u0436\u0435 \u0434\u0435\u0444\u0435\u043a\u0442 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Policy Secure \u0438 Neurons, \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 7 \u044f\u043d\u0432\u0430\u0440\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 Oracle WebLogic (CVE-2020-2883) \u0438 \u043f\u0430\u0440\u0443 \u0431\u0430\u0433\u043e\u0432 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u043d\u0438\u044f MiCollab (CVE-2024-41713, -55550). \u041d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u041f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u043d\u0430 WordPress \u0438 WooCommerce. \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d Fancy Product Designer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u0435\u0433\u043a\u043e \u043f\u0435\u0440\u0435\u043a\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c \u0444\u0443\u0442\u0431\u043e\u043b\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0435\u043a\u0441\u0442 \u043d\u0430 \u043a\u0440\u0443\u0436\u043a\u0430\u0445, \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 9 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u0432\u0435 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u0435\u0439. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430 20 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0432\u043d\u0435\u0441\u043b\u0438 \u043d\u0443\u0436\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c 20 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043b\u0430\u0433\u0438\u043d, \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0434\u0443\u043c\u0430\u0442\u044c \u0437\u0430\u043c\u0435\u043d\u0443 \u044d\u0442\u043e\u0433\u043e \u0438\u0437\u0434\u0435\u043b\u0438\u044f \u043d\u0430 \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u00ab\u043a\u0430\u0441\u0442\u043e\u043c\u0438\u0437\u0430\u0442\u043e\u0440\u00bb.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1580"}, {"timestamp": "2025-01-09T17:29:51.905Z", "date_only": false, "value": "2025-01-09T17:29:51.905380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "fb209bba-25cc-417c-a533-f25382456ea3", "url": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s"}, {"timestamp": "2025-01-11T04:55:18.856Z", "date_only": false, "value": "2025-01-11T04:55:18.856261Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-2883", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-11T04:55:18.856Z", "date_only": false, "value": "2025-01-11T04:55:18.856261Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2883", "record": "FKIE_CVE-2020-2883", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-12T10:34:02.094Z", "date_only": false, "value": "2025-01-12T10:34:02.094178Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "a85f74f3-9100-4e9c-8533-e94866c7b6ad", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": true, "value": "2025-01-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "evidence.0.details.due_date", "uuid": "51641f7d-4af9-42d2-82a5-320867263ea2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "55595d6e-b172-40f8-8ec4-6ca5bab677e3"}, {"timestamp": "2025-02-23T02:11:03Z", "date_only": false, "value": "2025-02-23T02:11:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "874b89b0-61ce-4864-8f68-89fdc2449939"}, {"timestamp": "2025-02-23T04:10:27Z", "date_only": false, "value": "2025-02-23T04:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "222ee0d5-8e99-449b-a75e-3437c1b71b9e"}, {"timestamp": "2025-04-08T14:06:04Z", "date_only": false, "value": "2025-04-08T14:06:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_access_manager_rce_cve_2021_35587.rb", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5dc44a78-2830-42a7-a4e4-c34b7a3f4a2d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_access_manager_rce_cve_2021_35587.rb"}, {"timestamp": "2025-08-26T09:52:01Z", "date_only": false, "value": "2025-08-26T09:52:01.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-26T09:52:01Z", "date_only": false, "value": "2025-08-26T09:52:01.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-26T09:52:01Z", "date_only": false, "value": "2025-08-26T09:52:01.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-18T10:00:00Z", "date_only": false, "value": "2025-09-18T10:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-05", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "0a054412-2c1e-4114-8d44-d85bbbd8dc97", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-05"}, {"timestamp": "2025-09-18T16:28:31Z", "date_only": false, "value": "2025-09-18T16:28:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/f7cd4caf7eead280dbe2c1c4eb7f9544", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "135e2b33-647d-4786-8944-e0f0ee96ba2e", "url": "https://gist.github.com/Darkcrai86/f7cd4caf7eead280dbe2c1c4eb7f9544"}, {"timestamp": "2025-09-18T19:40:09.850Z", "date_only": false, "value": "2025-09-18T19:40:09.850940Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-261-05", "record": "ICSA-25-261-05", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-18T20:02:20.148Z", "date_only": false, "value": "2025-09-18T20:02:20.148397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz55ee2upk2d", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "f228c4a2-8ac9-4a1d-9d16-11a425e51a58", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz55ee2upk2d"}, {"timestamp": "2025-10-14T10:07:35Z", "date_only": false, "value": "2025-10-14T10:07:35.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2020/CVE-2020-2883.yaml", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "8a2d82b3-cc5a-4340-9f06-ceec527e68fe", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2020/CVE-2020-2883.yaml"}, {"timestamp": "2025-10-20T04:01:23Z", "date_only": false, "value": "2025-10-20T04:01:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "06701946-ef36-49df-b640-eb97de410f7d", "url": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c"}, {"timestamp": "2025-10-20T05:01:51Z", "date_only": false, "value": "2025-10-20T05:01:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "321e1ede-1356-4b41-abb2-cf6f3e710b59", "url": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766"}, {"timestamp": "2025-10-22T00:31:52Z", "date_only": false, "value": "2025-10-22T00:31:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9X8Q-P3QP-R24W", "record": "GHSA-9X8Q-P3QP-R24W", "field": "modified"}, {"timestamp": "2026-01-12T21:02:18.109Z", "date_only": false, "value": "2026-01-12T21:02:18.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-2883", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-12T21:02:18.109Z", "date_only": false, "value": "2026-01-12T21:02:18.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-2883", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-02T12:26:17.060Z", "date_only": false, "value": "2026-02-02T12:26:17.060805Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/554f9393-3cf5-4347-8b83-ea23fac5b5f8", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "abc435d7-9409-4fa8-a86c-4fbc51bba609", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/554f9393-3cf5-4347-8b83-ea23fac5b5f8"}, {"timestamp": "2026-02-02T12:26:17.060Z", "date_only": false, "value": "2026-02-02T12:26:17.060805Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/554f9393-3cf5-4347-8b83-ea23fac5b5f8", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "4d8786a5-b885-4c88-a1ec-96b1dca8bcc2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/554f9393-3cf5-4347-8b83-ea23fac5b5f8"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-2883", "field": "timestamps.recorded_at", "uuid": "51641f7d-4af9-42d2-82a5-320867263ea2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-17T14:46:15.693Z", "date_only": false, "value": "2026-03-17T14:46:15.693357Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=469", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "871c44d6-592b-4ee3-98c7-4aa02df961e8", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=469"}, {"timestamp": "2026-03-17T14:46:21.018Z", "date_only": false, "value": "2026-03-17T14:46:21.018914Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittista-oracle-weblogic-server-palvelinohjelmiston-haavoittuvuutta-hyvaksikaytetaan", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "3a567927-bbfb-401a-9d90-678611b265e8", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittista-oracle-weblogic-server-palvelinohjelmiston-haavoittuvuutta-hyvaksikaytetaan"}, {"timestamp": "2026-06-17T03:13:10.183Z", "date_only": false, "value": "2026-06-17T03:13:10.183", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-2883", "record": "FKIE_CVE-2020-2883", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:29.805Z", "date_only": false, "value": "2026-06-19T12:46:29.805266Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/139da261-8f8f-4d24-800d-6108b1ab8800", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "060ab699-9031-474f-bb05-95b6fffb45d8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/139da261-8f8f-4d24-800d-6108b1ab8800"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-2883", "field": "timestamps.recorded_at", "uuid": "13b40c34-5086-4150-9f19-07475341daf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:31.653Z", "date_only": false, "value": "2026-06-23T11:14:31.653796Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/13b40c34-5086-4150-9f19-07475341daf5", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "780e7c1e-657b-45ca-9b28-e2f1eb1b74bd", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/13b40c34-5086-4150-9f19-07475341daf5"}, {"timestamp": "2026-06-23T14:06:03.061Z", "date_only": false, "value": "2026-06-23T14:06:03.061182Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78949196-1803-4e13-a636-78b6c8a5745c", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7a091856-779a-4d33-bbc2-fbf76444423d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78949196-1803-4e13-a636-78b6c8a5745c"}, {"timestamp": "2026-07-26T07:01:50.571Z", "date_only": false, "value": "2026-07-26T07:01:50.571460Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8639", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "7dab6eac-c2ac-4d7a-b198-181bb86d4888", "url": "https://t.me/KaitNews/8639"}, {"timestamp": "2026-07-27T00:01:33.894Z", "date_only": false, "value": "2026-07-27T00:01:33.894967Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8639", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "3e173183-7b49-4fb7-88b3-c5e364027290", "url": "https://t.me/KaitNews/8639"}, {"timestamp": "2026-07-29T01:00:04.434Z", "date_only": false, "value": "2026-07-29T01:00:04.434405Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KaitNews/8639", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "2e85ebd6-b374-4031-a7ee-0da724e6b011", "url": "https://t.me/KaitNews/8639"}, {"timestamp": "2026-07-30T00:03:19.961Z", "date_only": false, "value": "2026-07-30T00:03:19.961542Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KaitNews/8639", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "5a043be6-64a1-41c1-af85-a2f615e1c2c7", "url": "https://t.me/KaitNews/8639"}, {"timestamp": "2026-08-02T14:06:34.397Z", "date_only": false, "value": "2026-08-02T14:06:34.397904Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e6bCcvKtheqq7sygjc1Oa27WvTxBG_pIGIRDkrE-jOk6sw", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "96bfb4c2-1d70-4df2-9867-faefe9f6fa4c"}, {"timestamp": "2026-08-03T02:07:04.638Z", "date_only": false, "value": "2026-08-03T02:07:04.638954Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e6bCcvKtheqq7sygjc1Oa27WvTxBG_pIGIRDkrE-jOk6sw", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "76f510fc-b659-4b63-8ad6-fa7713361f56"}, {"timestamp": "2026-09-01T17:00:21.546Z", "date_only": false, "value": "2026-09-01T17:00:21.546485Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6663", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "c50724ca-9591-4199-aa70-a7876c491842", "url": "https://t.me/cissp/6663"}, {"timestamp": "2026-09-10T02:00:04.981Z", "date_only": false, "value": "2026-09-10T02:00:04.981815Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6663", "record": "CVE-2020-2883", "field": "creation_timestamp", "uuid": "876fe677-423a-4c3d-b7c8-0d4e04b73ab4", "url": "https://t.me/cissp/6663"}]}
