Exploit / PoChighExploited in the wild

CISA adds Microsoft SharePoint bug disclosed at Pwn2Own to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsApr 11, 2024 · 21:44 UTC (Apr 11, 2024)1 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-24955 CVE-2023-48788 CVE-2021-44529 CVE-2019-7256

Tags: cve-2023-24955 cve-2023-48788 cve-2021-44529 cve-2019-7256 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-7256	Unauthenticated OS Command Injection in Nice Linear eMerge E3 Access Controllers	9.8	97%	KEVPoC ×4	Jul 2, 2019 KEV Mar 25, 2024
CVE-2021-44529	Unauthenticated Code Injection RCE in Ivanti Endpoint Manager Cloud Services Appliance	9.8	99%	KEVRansomwarePoC ×2	Dec 8, 2021 KEV Mar 25, 2024
CVE-2023-24955	Authenticated Code Injection RCE in Microsoft SharePoint Server (Actively Exploited)	7.2	85%	KEVRansomware	May 9, 2023 KEV Mar 26, 2024
CVE-2023-48788	Unauthenticated SQL Injection in Fortinet FortiClient EMS	9.8	98%	KEVRansomware	Mar 12, 2024 KEV Mar 25, 2024

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Microsoft SharePoint vulnerability disclosed at the 2023 Pwn2Own to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.