Exploit / PoChighExploited in the wild

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

The Hacker Newsby @TheHackersNewsJun 4, 2024 · 08:27 UTC (Jun 4, 2024)1 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2017-3506 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-3506 CVE-2023-21839

Tags: cve-2017-3506 cve-2023-21839 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-3506	Unauthenticated OS Command Injection in Oracle WebLogic Server	7.4	96%	KEV	Apr 24, 2017 KEV Jun 3, 2024
CVE-2023-21839	Unauthenticated Remote Code Execution in Oracle WebLogic Server via T3/IIOP	7.5	100%	KEVPoC	Jan 18, 2023 KEV May 1, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jun 04, 2024 Network Security / Cryptocurrency The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.