Veille CVE

Lundi 1 mai 2023

3 CVE

  1. CVE-2023-21839 – Non évaluée Exploitée

    Oracle WebLogic Server

    Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.

  2. CVE-2023-1389 – Non évaluée Exploitée

    TP-Link Archer AX21

    TP-Link Archer AX-21 Command Injection Vulnerability — TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.

  3. CVE-2021-45046 – Non évaluée Exploitée Rançongiciel

    Apache Log4j2

    Apache Log4j2 Deserialization of Untrusted Data Vulnerability — Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.