內容說明：

CISA於1/6至1/12在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。
 

影響平台：

Ivanti｜Connect Secure、Policy Secure及ZTA Gateways
Oracle｜WebLogic Server
Mitel｜MiCollab
 

處置建議：

修補說明請參考以下官方連結：

Ivanti｜Connect Secure、Policy Secure及ZTA Gateways
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283

Oracle｜WebLogic Server
https://www.oracle.com/security-alerts/cpuapr2020.html

Mitel｜MiCollab
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029

CVE編號：

CVE-2020-2883
CVE-2024-41713
CVE-2024-55550
CVE-2025-0282

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2020-2883
3. https://nvd.nist.gov/vuln/detail/CVE-2024-41713
4. https://nvd.nist.gov/vuln/detail/CVE-2024-55550
5. https://nvd.nist.gov/vuln/detail/CVE-2025-0282
6. https://www.cisa.gov/cisa-mitigation-instructions-CVE-2025-0282

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/7fb8e1e9-68d9-41f2-b2a6-b57e47cbb3ad/
發布日期：15/01/2025