CVE-2020-2883 was patched in Oracle’s April 2020 Critical Patch Update – but proof of concept exploit code was published shortly after. Oracle is urging customers to fast-track a patch for a critical ...

Oracle on Thursday previewed a major update of its WebLogic app server. Oracle WebLogic Server 12c is being billed as the corner stone of the company's Cloud Application Foundation and a core ...

Oracle on Tuesday published an out-of-band update patching a critical code-execution vulnerability in its WebLogic server after researchers warned that the flaw was being actively exploited in the ...

Oracle has released an emergency patch to address a vulnerability in its WebLogic servers after a previous patch could easily be bypassed by an attacker. If exploited, CVE-2020-14882 can allow an ...

For the new release of its WebLogic, Oracle has tailored the enterprise Java application server so that it can be used more easily in cloud deployments. “Many of our customers are running in ...

Security researchers have spotted a new zero-day vulnerability impacting the Oracle WebLogic server that is currently being targeted in the wild. Oracle has been notified of the zero-day, but the ...

Threat actors are actively exploiting Oracle WebLogic servers unpatched against CVE-2020-14882 to deploy Cobalt Strike beacons which allow for persistent remote access to compromised devices. Cobalt ...

Hackers hit over 1,400 Apache Solr servers at the end of February in order to install once again, not ransomware, but a cryptocurrency miner. The attack on Apache Solr servers bears some resemblance ...