CISA warns of active exploitation of critical Oracle WebLogic vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive directing federal agencies to secure systems vulnerable to a critical vulnerability in the Oracle WebLogic Server that security researchers say is currently being actively exploited by attackers in the wild.

The vulnerability, tracked as CVE-2024-21182concerns Oracle WebLogic Server – one of the most widely used enterprise Java application servers used by governments, financial institutions, telecommunications providers and large corporations worldwide. Although Oracle released patches for the vulnerability nearly two years ago, cybersecurity officials warn that thousands of Internet-connected systems remain at risk and vulnerable to compromise.

The latest warning underscores growing concern within the cybersecurity community that threat actors…