Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

A critical, actively exploited vulnerability in Oracle WebLogic Server allows unauthenticated attackers to access sensitive data. Despite patches being released in January, threat actors are still leveraging this flaw, prompting a CISA Binding Operational Directive for federal agencies to address the issue immediately.