Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three flaws to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The security vulnerabilities are as follows -

CVE-2023-1389 (CVSS score: 8.8) - TP-Link Archer AX-21 Command Injection Vulnerability
CVE-2021-45046 (CVSS score: 9.0) - Apache Log4j2 Deserialization of Untrusted

agency alert apache apache log4j2 catalog cisa command command injection cve cve-2021-45046 cve-2023-1389 cvss cybersecurity exploitation exploited flaws infrastructure infrastructure security injection kev known exploited vulnerabilities link log4j2 oracle score security tp-link tp-link archer vulnerabilities vulnerability