Data breachcritical
14 Million Patients Impacted by US Healthcare Data Breaches in 2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-0099 | Local Privilege Escalation in Microsoft Windows Secondary Logon Service | 7.8 | 37% | KEVRansomwarePoC ×4 | KEV |
CVE-2021-26855+3 related CVEs | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 group max | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2021-31207 | Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE | 6.6 | 100% | KEVRansomwarePoC | KEV |
CVE-2021-34473+1 related CVE | SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell) | 9.1 group max | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-27350 | Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2023-4966 | Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway | 7.5 | 100% | KEVRansomware | KEV |
From the original article
2 min read at infosecurity-magazine.com
Read more on data breaches impacting US healthcare organizations in 2024: Millions of Americans' Data Potentially Exposed in Change Healthcare Hack Los Angeles Public Health Department Discloses Large Data Breach
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.