vulnerability
Oracle WebLogic: CVE-2020-5398 : Critical Patch Update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:H/Au:N/C:C/I:C/A:C) | Jan 17, 2020 | Jul 14, 2020 | Apr 22, 2026 |
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Jan 17, 2020
Added
Jul 14, 2020
Modified
Apr 22, 2026
Description
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Solutions
oracle-weblogic-jul-2020-cpu-12_2_1_3_0oracle-weblogic-jul-2020-cpu-12_2_1_4_0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.