Security
Headlines
HeadlinesLatestCVEs

Headline

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2017-3506 (CVSS score: 7.4), the issue concerns an operating system (OS) command injection vulnerability that could be exploited to obtain unauthorized

The Hacker News
#vulnerability#web#oracle#auth#The Hacker News

The Hacker News: Latest News

The Future of Serverless Security in 2025: From Logs to Runtime Protection