It was reported by Oracle on November 21 and added to CISA Known Exploited Vulnerabilities (KEV) catalog the same day following reports of active exploitation. The vulnerability lies in the REST ...