Adobe, Microsoft and Citrix vulnerabilities draw warnings from CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-29298 | Unauthenticated Access Control Bypass in Adobe ColdFusion (Actively Exploited) | 7.5 | 100% | KEV | KEV |
| CVE-2023-3519 | Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-36884 | Race Condition RCE in Microsoft Windows Search | 7.5 | 99% | KEVRansomware | KEV |
| CVE-2023-38203 | Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited) | 9.8 | 97% | KEVRansomware | KEV |
From the original article
4 min read at therecord.media
Products from Adobe, Microsoft and Citrix are being exploited by hackers, the Cybersecurity and Infrastructure Security Agency warned this week. In advisories and messages to the cybersecurity community, CISA urged users and administrators to apply the necessary patches as soon as possible due to confirmed reports that the vulnerabilities are being used in cyberattacks.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.