Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Jun 3, 2024

1 new incident, 0 with updates.

Started

  • ClosedHighPatched

    Oracle WebLogic Server OS Command Injection

    Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document. Added to the CISA KEV catalog on 2024-06-03. CVE-2017-3506 was assigned before 2024; the KEV listing came in 2024.

    Oracle WebLogic ServerClosed Jun 3, 2024

Sponsored

Buy sponsor slot · $149/mo