---
title: "Security digest: April 14, 2020"
url: https://erroneo.us/security/2020-04-14/
description: "April 14, 2020 vulnerability digest: 1 brief (WebLogic CVE-2020-2883: T3/IIOP Deserialization…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2020-04-14
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: April 14, 2020

1 editorial brief.

## Take stock

- Check exposure: WebLogic CVE-2020-2883: T3/IIOP Deserialization RCE . Owners of WebLogic Server 10.3.6, 12.1.3, 12.2.1.3 or 12.2.1.4 without the April 2020 or later patches, and anyone exposing the T3 or IIOP listener beyond trusted hosts.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [WebLogic CVE-2020-2883: T3/IIOP Deserialization RCE](https://erroneo.us/security/briefs/weblogic-cve-2020-2883-t3-iiop-deserialization-rce/index.md): Exploited since 2020 and fixed since April 2020; the 2025 KEV listing adds no new campaign, but any WebLogic server with T3 or IIOP reachable from untrusted networks and old patches is still an easy takeover.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2020-04-14/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt