NVD disclosure day

Published threat advisories for November 2, 2020

CVE-2020-24881

osTicket SSRF Vulnerability Allows File Upload and Port Scanning

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A Server-Side Request Forgery vulnerability exists in osTicket, allowing an unauthenticated attacker to upload malicious files to the server or scan network ports. This could potentially lead to unauthorized access or service disruption.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2020-14750

Oracle WebLogic Server Compromise Risk

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in Oracle WebLogic Server's Console component allows unauthenticated network attackers to take over the server. This poses a significant business risk, potentially leading to data compromise and service disruption. Prompt action is recommended to mitigate threats to organizational systems.

NVD modified: NVD date unavailable • CISA KEV