In addition to an Oracle WebLogic weakness that the manufacturer patched in January, CISA included three other vulnerabilities to its list of known exploits.
Several proofs-of-concept (PoC) use targeting CVE-2023-21839 have been public since late February.
The vulnerability was originally revealed at Zero Day Initiative’s Pwn2Own Toronto hacking contest last year, where participants gained nearly $1 million for their exploits.
Read more: CISA Warns of Attacks Exploiting Oracle WebLogic Vulnerability Patched in January
For more such updates follow us on Google News ITsecuritywire News. Please subscribe to our Newsletter for more updates.