CISA warns of critical Oracle, Mitel flaws exploited in attacks

CISA has added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a critical unauthenticated path traversal in Mitel MiCollab (CVE-2024-41713) that can allow unauthorized administrative actions and access to user/network information, a second authenticated MiCollab path traversal (CVE-2024-55550) with limited impact, and a critical Oracle WebLogic flaw (CVE-2020-2883) historically patched but reported as actively exploited; federal agencies are required to remediate these within the BOD 22-01 timeline.