VulnerabilitycriticalExploited in the wild

Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug

Help Net Securityby @helpnetsecurityNov 5, 2023 · 00:00 UTC (Nov 5, 2023)5 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-4966 CVE-2023-22518 CVE-2023-46747 CVE-2023-46748 CVE-2023-46604

Tags: cve-2023-4966 cve-2023-22518 cve-2023-46747 cve-2023-46748 cve-2023-46604 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22518	Improper Authorization in Atlassian Confluence Data Center and Server	9.8	100%	KEVRansomwarePoC	Oct 31, 2023 KEV Nov 7, 2023
CVE-2023-46604	Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization	9.8	100%	KEVRansomwarePoC	Oct 27, 2023 KEV Nov 2, 2023
CVE-2023-46747 +1 related CVE CVE-2023-46748	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8 group max	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: AI threat landscape: Model theft and inference attacks emerge as top concerns In this Help Net Security interview, Guy Guzner, CEO at Savvy, discusses the challenges and opportunities presented by in-house AI models, the security landscape surrounding them, and the future of AI cybersecurity.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.