Active Exploitation of Oracle WebLogic Vulnerabilities - Patch Now
NJCCIC Alert
Original Release Date: 5/8/2020
Summary
Last month, Oracle patched several vulnerabilities affecting multiple versions of WebLogic servers, including the CVE-2020-2883 vulnerability that received a 9.8 severity score. After receiving reports of attempts to exploit the vulnerabilities, Oracle published a security alert urging companies with affected systems to install the latest patches. Threat actors could potentially take control over unpatched systems, run cryptocurrency miners, breach corporate networks, and install ransomware.
Recommendations
The NJCCIC recommends IT administrators and security teams patch systems immediately after appropriate testing. More information can be found in the Oracle security alert and ZDNet article.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.