VulnerabilitycriticalExploited in the wild

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies

The Hacker Newsby @TheHackersNewsSep 15, 2022 · 00:00 UTC (Sep 15, 2022)3 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2022-26134 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-26134 CVE-2020-14882

Tags: cve-2022-26134 cve-2020-14882 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-14882	Remote Code Execution in Oracle WebLogic Server	9.8	100%	KEVPoC ×3	Oct 21, 2020 KEV Nov 3, 2021
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022

From the original article

3 min read at thehackernews.com

Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-mining malware.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.