Jan 7, 2025

Started

• ClosedCritical✓Patched

  Mitel MiCollab: 2 exploited vulnerabilities (CVE-2024-41713, CVE-2024-55550)

  CVE-2024-41713: Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server. CVE-2024-55550: Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server. Added to CISA KEV on 2025-01-07.

  Mitel MiCollab·Closed Jan 7, 2025·updated Jan 7, 2025

• ClosedCritical✓Patched

  Oracle WebLogic Server: WebLogic Server Unspecified Vulnerability

  Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3. Added to CISA KEV on 2025-01-07.

  Oracle WebLogic Server·Closed Jan 7, 2025·updated Jan 7, 2025