Security News > 2023 > December > 8220 Gang Exploiting Oracle WebLogic Server Vulnerability to Spread Malware
2023-12-19 06:58
The threat actors associated with the 8220 Gang have been observed exploiting a high-severity flaw in Oracle WebLogic Server to propagate their malware. The security shortcoming is CVE-2020-14883 (CVSS score: 7.2), a remote code execution bug that could be exploited by authenticated attackers to take over susceptible servers. "This vulnerability allows remote authenticated
News URL
https://thehackernews.com/2023/12/8220-gang-exploiting-oracle-weblogic.html
Related news
- AI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022) (source)
- DinodasRAT malware targets Linux servers in espionage campaign (source)
- New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks (source)
- A critical vulnerability in Delinea Secret Server allows auth bypass, admin access (source)
- Researchers sinkhole PlugX malware server with 2.5 million unique IPs (source)
- Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-10-21 | CVE-2020-14883 | Unspecified vulnerability in Oracle Weblogic Server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). | 9.0 |