VulnerabilitycriticalExploited in the wild

Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers

Help Net Securityby @zeljkazorzJan 8, 2025 · 00:00 UTC (Jan 8, 2025)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-41713 CVE-2024-55550 CVE-2020-2883 CVE-2020-2555 CVE-2024-0012 CVE-2024-9474

Tags: cve-2024-41713 cve-2024-55550 cve-2020-2883 cve-2020-2555 cve-2024-0012 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-2555	Unauthenticated deserialization RCE in Oracle Coherence via T3	9.8	97%	KEVPoC ×3	Jan 15, 2020 KEV Nov 3, 2021
CVE-2020-2883	Unauthenticated RCE in Oracle WebLogic Server via T3/IIOP	9.8	95%	KEV	Apr 15, 2020 KEV Jan 7, 2025
CVE-2024-0012 +1 related CVE CVE-2024-9474	Authentication Bypass in Palo Alto Networks PAN-OS Management Interface	9.3 group max	100%	KEVRansomwarePoC	Nov 18, 2024 KEV Nov 18, 2024
CVE-2024-41713	Unauthenticated Path Traversal in Mitel MiCollab NuPoint Unified Messaging	9.1	97%	KEVRansomware	Oct 21, 2024 KEV Jan 7, 2025
CVE-2024-55550	Authenticated Path Traversal in Mitel MiCollab Enables Local File Reading	2.7	38%	KEVRansomware	Dec 10, 2024 KEV Jan 7, 2025

From the original article

2 min read at helpnetsecurity.com

CISA has added Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic Server (CVE-2020-2883) vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2024-41713 and CVE-2024-55550 are both path traversal vulnerabilities.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.