ChangeIntelIT change radar
Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 252/253 feeds/APIs · 235/443 docs · checked 22:44 UTC Customize Public modeDiscuss ChangeIntel on Discord

Oracle WebLogic Server, Injection

CISA lists this Oracle WebLogic Server vulnerability as known exploited. The vendor's advisory has the fixed versions.

CISA catalog record

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

Product
WebLogic Server
Added to KEV
10 Jan 2022
Federal remediation due
10 Jul 2022
Known ransomware use
Yes
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Oct 22:44 UTC · 252 of 253 readable · 250 fully read · documentation 235/443 current