Exploit / PoCcriticalExploited in the wild

CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation

The Hacker Newsby @TheHackersNewsJan 9, 2025 · 06:39 UTC (Jan 9, 2025)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-41713 CVE-2024-55550 CVE-2020-2883 CVE-2024-35286

Tags: cve-2024-41713 cve-2024-55550 cve-2020-2883 cve-2024-35286 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-2883	Unauthenticated RCE in Oracle WebLogic Server via T3/IIOP	9.8	95%	KEV	Apr 15, 2020 KEV Jan 7, 2025
CVE-2024-41713 +1 related CVE CVE-2024-35286	Unauthenticated Path Traversal in Mitel MiCollab NuPoint Unified Messaging	9.1 group max	97%	KEVRansomware	Oct 21, 2024 KEV Jan 7, 2025
CVE-2024-55550	Authenticated Path Traversal in Mitel MiCollab Enables Local File Reading	2.7	38%	KEVRansomware	Dec 10, 2024 KEV Jan 7, 2025

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 08, 2025 Vulnerability / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three flaws impacting Mitel MiCollab and Oracle WebLogic Server to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.