CISA tags Microsoft .NET and Apache OFBiz bugs as exploited in attacks

CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog—most notably CVE-2024-45195, a critical (CVSS 9.8) Apache OFBiz RCE, and CVE-2024-29059, a .NET information disclosure—with proofs-of-concept and vendor fixes available; agencies and organizations are urged to apply patches or stop using affected products by February 25, 2025. The advisory includes two older Paessler PRTG flaws fixed in 2018, and while CISA marks the flaws as actively exploited, it provides no details about ongoing attacks or victims.