VulnerabilitycriticalExploited in the wild

Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!

The Hacker Newsby @TheHackersNewsJan 17, 2024 · 04:23 UTC (Jan 17, 2024)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-6548 CVE-2023-6549 CVE-2023-3519 CVE-2023-4966 CVE-2023-34063 CVE-2023-22527

Tags: cve-2023-6548 cve-2023-6549 cve-2023-3519 cve-2023-4966 cve-2023-34063 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22527	Unauthenticated OGNL Template Injection RCE in Atlassian Confluence Data Center/Server	9.8	100%	KEVRansomwarePoC ×2	Jan 16, 2024 KEV Jan 24, 2024
CVE-2023-34063	Aria Automation contains a Missing Access Control vulnerability	8.3	<1%		Jan 16, 2024
CVE-2023-3519	Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway	9.8	100%	KEVRansomwarePoC	Jul 19, 2023 KEV Jul 19, 2023
CVE-2023-4966	Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway	7.5	100%	KEVRansomware	Oct 10, 2023 KEV Oct 18, 2023
CVE-2023-6548 +1 related CVE CVE-2023-6549	Authenticated Code-Injection RCE in Citrix NetScaler ADC/Gateway	8.8 group max	3%	KEV	Jan 17, 2024 KEV Jan 17, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jan 17, 2024 Vulnerability / Cyber Threat Citrix is warning of two zero-day security vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that are being actively exploited in the wild. CVE-2023-6548 (CVSS score: 5.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.