Exploit / PoCcriticalExploited in the wild

CISA adds Adobe ColdFusion bug to Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsMar 16, 2023 · 08:47 UTC (Mar 16, 2023)1 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-26360 CVE-2023-23397 CVE-2023-24880 CVE-2022-41328

Tags: cve-2023-26360 cve-2023-23397 cve-2023-24880 cve-2022-41328 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41328	Path Traversal in Fortinet FortiOS Exploited in Targeted Attacks	7.1	11%	KEV	Mar 7, 2023 KEV Mar 14, 2023
CVE-2023-23397	Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak)	9.8	97%	KEV	Mar 14, 2023 KEV Mar 14, 2023
CVE-2023-24880	SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server	4.4	78%	KEVRansomware	Mar 14, 2023 KEV Mar 14, 2023
CVE-2023-26360	Unauthenticated RCE via Improper Access Control in Adobe ColdFusion	8.6	97%	KEVPoC	Mar 23, 2023 KEV Mar 15, 2023

From the original article

1 min read at securityaffairs.com

US CISA added an actively exploited vulnerability in Adobe ColdFusion to its Known Exploited Vulnerabilities Catalog. U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.