Data breachcriticalExploited in the wild

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA

The Hacker Newsby @TheHackersNewsFeb 25, 2025 · 04:10 UTC (Feb 25, 2025)1 min read2 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2017-3066 CVE-2024-20953 CVE-2024-21287 CVE-2023-20198 CVE-2018-0171 CVE-2023-20273

Tags: cve-2017-3066 cve-2024-20953 cve-2024-21287 cve-2023-20198 cve-2018-0171 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-3066	Unauthenticated Deserialization RCE in Adobe ColdFusion (BlazeDS)	9.8	91%	KEVPoC	Apr 27, 2017 KEV Feb 24, 2025
CVE-2018-0171	Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install	9.8	99%	KEV	Mar 28, 2018 KEV Nov 3, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-20273	Authenticated Command Injection (Root) in Cisco IOS XE Web UI	7.2	93%	KEV	Oct 25, 2023 KEV Oct 23, 2023
CVE-2024-20953	Deserialization Flaw in Oracle Agile PLM 9.3.6 Export Component Exploited in the Wild	8.8	4%	KEV	Feb 17, 2024 KEV Feb 24, 2025
CVE-2024-21287	Incorrect Authorization Flaw in Oracle Agile PLM 9.3.6 Under Active Exploitation	7.5	2%	KEV	Nov 18, 2024 KEV Nov 21, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Feb 25, 2025 Network Security / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.