Category Archives: Oracle WebLogic Server

New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now

Posted on by

Oracle has released an out-of-band emergency software update to patch a newly discovered critical vulnerability in the WebLogic Server.

According to Oracle, the vulnerability—which can be identified as CVE-2019-2729 and has a CVSS score of 9.8 out of … Continue reading New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now→

Hackers Found Exploiting Oracle WebLogic RCE Flaw to Spread Ransomware

Posted on by

Taking advantage of newly disclosed and even patched vulnerabilities has become common among cybercriminals, which makes it one of the primary attack vectors for everyday-threats, like crypto-mining, phishing, and ransomware.

As suspected, a recently-… Continue reading Hackers Found Exploiting Oracle WebLogic RCE Flaw to Spread Ransomware→

‘Highly Critical’ Unpatched Zero-Day Flaw Discovered In Oracle WebLogic

Posted on by

A team of cybersecurity researchers today published a post warning enterprises of an unpatched, highly critical zero-day vulnerability in Oracle WebLogic server application that some attackers might have already started exploiting in the wild.

Oracle … Continue reading ‘Highly Critical’ Unpatched Zero-Day Flaw Discovered In Oracle WebLogic→

Faulty Patch for Oracle WebLogic Flaw Opens Updated Servers to Hackers Again

Posted on by

Earlier this month, Oracle patched a highly critical Java deserialization remote code execution vulnerability in its WebLogic Server component of Fusion Middleware that could allow attackers to easily gain complete control of a vulnerable server.

Howe… Continue reading Faulty Patch for Oracle WebLogic Flaw Opens Updated Servers to Hackers Again→