Mitel 0-day, 5-year-old Oracle RCE exploited in the wild
Briefly

Cybercriminals are exploiting vulnerabilities in Mitel MiCollab and Oracle WebLogic Server, highlighting the urgency for organizations to patch these critical flaws as soon as possible.
CISA has added these vulnerabilities to its Known Exploited Vulnerabilities Catalog due to evidence of ongoing exploitation, stressing the importance of swift remediation by organizations.
The critical CVE for MiCollab allows unauthenticated attackers to conduct path traversal attacks, impacting users' data and system configurations, demanding immediate attention from IT teams.
Despite the identified low-severity flaw in MiCollab, it could still be chained with another vulnerability, leading to increased risk and requiring organizations to stay vigilant.
Read at Theregister
[
|
]