Ransomwarecritical
Five Eyes Agencies List Top 15 Most Exploited Bugs of 2021
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2021-21972 | Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 9.8 | 100% | KEVRansomwarePoC | KEV |
From the original article
2 min read at infosecurity-magazine.com
The security agencies of the US, Australia, Canada, the UK and New Zealand have published a definitive list of the most exploited vulnerabilities of 2021, topped by Log4Shell. Aside from the notorious Log4j vulnerability, the list includes the notable ProxyLogon and ProxyShell flaws and other Microsoft bugs ZeroLogon, and another Microsoft Exchange Server flaw ( CVE-2020-0688 ).
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.