CISA Warns Agencies to Patch Actively Exploited Oracle WebLogic Proxy Flaw

Summary

CISA has issued a directive requiring federal civilian agencies to patch a critical vulnerability in Oracle WebLogic Server. The flaw, identified as CVE-2023-21931, allows unauthenticated attackers to expose or alter sensitive data. Agencies have a deadline of August 27, 2024, to implement the necessary patches, highlighting the urgency due to active exploitation.

Indicators of Compromise

• cve — CVE-2023-21931

Entities