Security News > 2023 > December > 8220 Gang Exploiting Oracle WebLogic Server Vulnerability to Spread Malware
2023-12-19 06:58
The threat actors associated with the 8220 Gang have been observed exploiting a high-severity flaw in Oracle WebLogic Server to propagate their malware. The security shortcoming is CVE-2020-14883 (CVSS score: 7.2), a remote code execution bug that could be exploited by authenticated attackers to take over susceptible servers. "This vulnerability allows remote authenticated
News URL
https://thehackernews.com/2023/12/8220-gang-exploiting-oracle-weblogic.html
Related news
- New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking (source)
- VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability (source)
- Perfctl malware strikes again as crypto-crooks target Docker Remote API servers (source)
- Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287) (source)
- Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-10-21 | CVE-2020-14883 | Unspecified vulnerability in Oracle Weblogic Server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). | 7.2 |