The critical remote code execution (RCE) vulnerability CVE-2020-14882 in Oracle WebLogic is actively exploited by operators behind the DarkIRC botnet. The vulnerability received a severity rating 9.8 out of 10, it was addressed by Oracle in October Critical Patch Update (CPU) Most of the systems exposed online are in China (829), followed by the United States (526) and Iran (369) Juniper Threat Labs researchers observed at least five different variants of malicious spayload.”]
Source: https://securityaffairs.co/wordpress/111743/hacking/darkirc-oracle-weblogic-cve-2020-14882.html