Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds Alarm
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8639 | Kernel-mode privilege escalation in Microsoft Windows Win32k | 7.8 | 22% | KEVRansomware | KEV |
CVE-2022-43939+1 related CVE | Authorization Bypass in Hitachi Vantara Pentaho Business Analytics Server | 9.8 group max | 92% | KEVPoC | KEV |
| CVE-2023-20118 | Authenticated Command Injection in Cisco Small Business RV Series Routers | 7.2 | 54% | KEV | KEV |
| CVE-2024-4885 | Unauthenticated Path Traversal RCE in Progress WhatsUp Gold | 9.8 | 99% | KEV | KEV |
From the original article
2 min read at thehackernews.com
The Hacker News Mar 04, 2025 Cyber Attack / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting software from Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.