Overview

Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.

Organisations Involved

The following organisations are mentioned in relation to this incident: Flaw
Attackers, Fusion Middleware Has Critical, Oracle, Patch Now, Web Services Managers.

Multi-Source Coverage

This event has been reported across multiple outlets:


Sources: darkreading. Aggregated by Cybernews Agency pipeline.