CISA Flags Critical Flaws in Mitel and Oracle Systems

Mitel 0-day, 5-year-old Oracle RCE bug under active exploit
Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw – and a critical remote code execution vulnerability in Oracle WebLogic Server that has been abused for at least five years.
Critical Mitel, Oracle flaws find active exploitation, CISA urges patching
CISA added the flaws to its known vulnerability catalog, recommending swift patching pursuant to Binding Operational Directive (BOD) 22-01.
CISA says Oracle and Mitel have critical security flaws being exploited
Mitel’s MiCollab is a popular unified communications platform, and as such - a major target for cybercriminals. In early December this year, the company patched a three-month-old zero-day vulnerability that allowed crooks to read sensitive files.
CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
CISA says two recently disclosed path traversal vulnerabilities in the Mitel MiCollab collaboration platform have been exploited in attacks.
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation
CISA lists critical flaws in Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic (CVE-2020-2883).
CISA warns of critical Oracle, Mitel flaws exploited in attacks
CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are actively exploited in attacks.
JD Supra3d
A Tale of 2 Rulings: Serta, Mitel Cases Remind Why Contract Language Matters in Debt Documents
A three-judge panel of the U.S. Court of Appeals for the Fifth Circuit has unanimously held that the debt exchange undertaken by Serta Simmons ...
Bloomberg L.P.29d
Mitel Weighs Restructuring as Debt at Deeply Distressed Levels
Mitel Networks is working with a cadre of advisers as the telecommunications firm looks to restructure its debt, according to people familiar with the situation. The Canadian company is working ...
Hosted on MSN1mon
Mitel collaboration software zero-day strings along a previously patched vulnerability
Security pros from watchTowr found a new bug in Mitel MiCollab Mitel has not yet released a patch WatchTowr suggested a number of mitigations to minimize risk A zero-day vulnerability, allowing ...
JD Supra2d
Latest Uptier Decisions in Serta and Mitel Remind Contract Language Matters
The caselaw on “uptiers” as liability management exercises (LMEs) grew by two opinions on the last day of 2024. In Serta, the Fifth Circuit ...