Its inclusion in the US CISA catalog of known exploited vulnerabilities is a warning to admins that patching is needed now.
Organizations running Oracle WebLogic Server faced active attacks for roughly two weeks before any official fix arrived, ...