{"id":6887,"date":"2025-02-25T04:56:22","date_gmt":"2025-02-25T04:56:22","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/cisa-flags-exploited-flaws-in-adobe-oracle-products\/"},"modified":"2025-02-25T04:56:23","modified_gmt":"2025-02-25T04:56:23","slug":"cisa-flags-exploited-flaws-in-adobe-oracle-products","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/cisa-flags-exploited-flaws-in-adobe-oracle-products\/","title":{"rendered":"CISA Flags Exploited Flaws in Adobe, Oracle Products"},"content":{"rendered":"\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">February 25, 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Network Security \/ Vulnerability<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\">\n<a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhjhqUsswfkChi08y6URrbTkEO3GF-O3aDUuhdjkE58ALIf8JwOHEW3VYd9cWam5BWFlf9KRjRKEHfzeUd0HjI807wmPevJV5Rm6tcvyIncDtPd33WVFmx13O84SrLKplFM88G7JNeLEPPNlsLQiesJDwM9kbu1Eurrh9SfzcZTZpK6nRB2SB0ZORWJQ9Xw\/s728-rw-e365\/cisa.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\" rel=\"nofollow noopener\" target=\"_blank\"><\/p>\n<p><\/a>\n<\/div>\n<p>The United States Cybersecurity and Infrastructure Security Agency (CISA) has recently <a href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2025\/02\/24\/cisa-adds-two-known-exploited-vulnerabilities-catalog\" rel=\"noopener nofollow\" target=\"_blank\">added<\/a> two security vulnerabilities to its catalog of Known Exploited Vulnerabilities (KEV), which affect Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM), due to evidence of active exploitation.<\/p>\n<p>The vulnerabilities in question are:<\/p>\n<ul>\n<li><strong><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2017-3066\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2017-3066<\/a><\/strong> (CVSS score: 9.8) &#8211; This is a deserialization vulnerability in the Apache BlazeDS library that affects Adobe ColdFusion, allowing for arbitrary code execution. A fix for this vulnerability was released in <a href=\"https:\/\/helpx.adobe.com\/security\/products\/coldfusion\/apsb17-14.html\" rel=\"noopener nofollow\" target=\"_blank\">April 2017<\/a>.<\/li>\n<li><strong><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-20953\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2024-20953<\/a><\/strong> (CVSS score: 8.8) &#8211; This is a deserialization vulnerability that affects Oracle Agile PLM, allowing a low-privileged attacker with network access via HTTP to compromise the system. A fix for this vulnerability was released in <a href=\"https:\/\/www.oracle.com\/security-alerts\/cpujan2024.html\" rel=\"noopener nofollow\" target=\"_blank\">January 2024<\/a>.<\/li>\n<\/ul>\n<p>Although there are currently no public reports of these vulnerabilities being exploited, another vulnerability affecting Oracle Agile PLM (<a href=\"https:\/\/thehackernews.com\/2024\/11\/oracle-warns-of-agile-plm-vulnerability.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2024-21287<\/a>, CVSS score: 7.5) was actively exploited late last year.<\/p>\n<div class=\"dog_two clear\">\n<center class=\"cf\"><br \/>\n<a href=\"https:\/\/thehackernews.uk\/encrypted-attacks-report-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><br \/>\n<img fetchpriority=\"high\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh6e4c8i_pkXRCFnrtqVIygOrARiVnU3_KUgU5mhPl5V4uj8R1KcQOxRLdZ0xm1Rf5AX_cviUAeiiRkTJCe8HXzOeB363590NBXAMv92N9e7zr4m7aKtDq-Q_gpP9QFWecL0oxcVtmqSg9qrGEGqlDbzwNNFKGJe2nlup4tuL7AZzTm0U501YxPGodOc2Fq\/s728-rw-e100\/zz-d.jpg\" width=\"727\" height=\"90\"\/><br \/>\n<\/a><br \/>\n<\/center>\n<\/div>\n<p>To mitigate the risks posed by potential attacks using these vulnerabilities, it is recommended that users apply the necessary updates. Federal agencies have until March 17, 2025, to secure their networks against these threats.<\/p>\n<p>This development comes as threat intelligence firm GreyNoise revealed active exploitation attempts targeting CVE-2023-20198, a now-patched security flaw affecting vulnerable Cisco devices.<\/p>\n<p>As many as 110 malicious IPs, mainly originating from Bulgaria, Brazil, and Singapore, have been linked to the malicious activity.<\/p>\n<p>&#8220;Two malicious IPs exploited CVE-2018-0171 in December 2024 and January 2025, originating from Switzerland and the United States \u2014 the same period when <a href=\"https:\/\/thehackernews.com\/2025\/02\/cisco-confirms-salt-typhoon-exploited.html\" rel=\"noopener nofollow\" target=\"_blank\">Salt Typhoon<\/a>, a Chinese state-sponsored threat group, reportedly breached telecom networks using CVE-2023-20198 and CVE-2023-20273,&#8221; the GreyNoise Research Team <a href=\"https:\/\/www.greynoise.io\/blog\/greynoise-observes-active-exploitation-of-cisco-vulnerabilities-tied-to-salt-typhoon-attacks\" rel=\"noopener nofollow\" target=\"_blank\">said<\/a>.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Found this article interesting?  Follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> to read more exclusive content we post.<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/02\/two-actively-exploited-security-flaws.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue802February 25, 2025\ue804Ravie LakshmananNetwork Security \/ Vulnerability The United States Cybersecurity and Infrastructure Security Agency (CISA) has recently added two security vulnerabilities to its catalog of Known Exploited Vulnerabilities (KEV),&#8230;<\/p>\n","protected":false},"author":19,"featured_media":6888,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-6887","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/1740459383_cisa.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/6887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=6887"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/6887\/revisions"}],"predecessor-version":[{"id":6889,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/6887\/revisions\/6889"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/6888"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=6887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=6887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=6887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}