Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Oracle WebLogic Server and Mitel MiCollab flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJan 8, 2025 · 06:58 UTC (Jan 8, 2025)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2020-2883 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-2883 CVE-2024-41713 CVE-2024-55550

Tags: cve-2020-2883 cve-2024-41713 cve-2024-55550 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-2883	Unauthenticated RCE in Oracle WebLogic Server via T3/IIOP	9.8	95%	KEV	Apr 15, 2020 KEV Jan 7, 2025
CVE-2024-41713	Unauthenticated Path Traversal in Mitel MiCollab NuPoint Unified Messaging	9.1	97%	KEVRansomware	Oct 21, 2024 KEV Jan 7, 2025
CVE-2024-55550	Authenticated Path Traversal in Mitel MiCollab Enables Local File Reading	2.7	38%	KEVRansomware	Dec 10, 2024 KEV Jan 7, 2025

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle WebLogic Server and Mitel MiCollab flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.