WebLogic Archives - Securezoo

CISA Adds TP-Link, Apache Log4j2 and Oracle WebLogic Vulnerabilities To Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 2, 2023 / Apache, CVE-2021-45046, CVE-2023-1389, CVE-2023-21839, Log4j, Oracle, TP-Link, WebLogic

The Cybersecurity and Infrastructure Security Agency (CISA) has added TP-Link, Apache Log4j2 and Oracle WebLogic vulnerabilities to its Known Exploited Vulnerabilities Catalog.

CISA Adds TP-Link, Apache Log4j2 and Oracle WebLogic Vulnerabilities To Known Exploited Vulnerabilities Catalog Read More »

CISA adds 12 vulnerabilities to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / September 11, 2022 / Android, Apple, Chrome, CVE-2022-26258, CVE-2022-27593, CVE-2022-28958, CVE-2022-3075, D-Link, FortiOS, MikroTik, Oracle, QNAP, QNAP NAS, WebLogic

The Cybersecurity and Infrastructure Security Agency (CISA) has added 12 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Apple, Chrome, Android OS, D-Link (5), QNAP NAS, MikroTik, Oracle WebLogic, FortiOS and FortiADC flaws.

CISA adds 12 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

Pro-Ocean cryptojacking malware targets cloud applications

Cloud Security, Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / February 1, 2021 / ApacheMQ, CVE-2016-3088, CVE-2017-10271, Mining, Oracle Weblogic, Pro-Ocean, rootkit, Unit 42, Watchdog, WebLogic

A new Pro-Ocean cryptojacking malware targets popular cloud applications including ApacheMQ, Oracle Weblogic and Redis. The malware contains four modules that execute to hide, mine cryptocurrency, watchdog and infect systems.

Pro-Ocean cryptojacking malware targets cloud applications Read More »

Oracle Critical Patch Update for January 2021

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / January 22, 2021 / CVE-2020-14750, Database, Enterprise Manager, Fusion, Java, MySQL, Oracle, WebLogic

Oracle has released its Critical Patch Update for January 2021 to include 329 vulnerability fixes across multiple products.

Oracle Critical Patch Update for January 2021 Read More »

Oracle releases emergency patch for Weblogic RCE vulnerability (CVE-2020-14750)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 3, 2020 / CVE-2020-14750, Fusion, Oracle, Oracle Database, WebLogic

Oracle has released an emergency patch for a Weblogic remote code execution (RCE) vulnerability CVE-2020-14750.

Oracle releases emergency patch for Weblogic RCE vulnerability (CVE-2020-14750) Read More »

Alert: Weblogic vulnerability exploited in the wild (apply April CPUs without delay)

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / May 3, 2020 / CVE-2020-2883, Fusion, Oracle, WebLogic

Oracle released a new warning that a previously patched Weblogic vulnerability CVE-2020-2883 is being exploited in the wild. The company further urged organizations should apply April CPUs without delay.

Alert: Weblogic vulnerability exploited in the wild (apply April CPUs without delay) Read More »

The top 20 vulnerabilities to patch now (that are most under attack)

Cybersecurity Articles, Cybersecurity Attacks, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 26, 2019 / Apache, BlueKeep, CVE-2012-0158, CVE-2014-8361, CVE-2017-0143, CVE-2017-0199, CVE-2017-10271, CVE-2017-11882, CVE-2017-17215, CVE-2017-5638, CVE-2017-5715, CVE-2017-8570, CVE-2017-8759, CVE-2018-0802, CVE-2018-10561, CVE-2018-12130, CVE-2018-20250, CVE-2018-4878, CVE-2018-7600, CVE-2018-8174, CVE-2019-0708, CVE-2019-2725, IOT, Loki, MDS, Meltdown, Nanocore, Spectre, Struts, Verint, Vulnerabilities, WebLogic, WinRAR, Zyklon

Security firm Verint analyzed the top 20 vulnerabilities to patch now that are under active attack and exploited by cyber attack groups worldwide. The report is aimed at assisting security teams in prioritizing and enhancing their organization’s patch management efforts.

The top 20 vulnerabilities to patch now (that are most under attack) Read More »

Sodin ransomware spreads through MSPs

Cybersecurity Attacks, Malware, Third-Party Security / Frank Crast / July 6, 2019 / malware, MSP, Ransomware, Sodin, Sodinokibi, WebLogic

Cyber criminals are targeting vulnerable software and gaps in managed service providers’ (MSP) security systems to distribute Sodin ransomware.

Sodin ransomware spreads through MSPs Read More »

Oracle patches Critical WebLogic vulnerability exploited in the wild (CVE-2019-2729)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 20, 2019 / Fusion Middleware, Oracle, WebLogic

Oracle has released a patch for a critical vulnerability CVE-2019-2729 in Oracle WebLogic Server, exploited in the wild. The company also warns bad actors can remotely exploit the flaw without a username and password.

Oracle patches Critical WebLogic vulnerability exploited in the wild (CVE-2019-2729) Read More »

Oracle WebLogic Server vulnerability exploited to install cryptocurrency miner

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / June 11, 2019 / Cryptocurrency, CVE-2019-2725, Monero, Oracle, WebLogic

Researchers at Trend Micro have discovered bad actors exploiting an Oracle WebLogic Server deserialization vulnerability CVE-2019-2725 to install a Monero cryptocurrency miner.

Oracle WebLogic Server vulnerability exploited to install cryptocurrency miner Read More »