Vulnerabilitycritical
Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCE
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20481 | Unauthenticated Remote Access VPN DoS in Cisco ASA and FTD Software | 5.8 | 16% | KEV | KEV |
| CVE-2024-37383 | Cross-Site Scripting in Roundcube Webmail via SVG animate attributes | 6.1 | 74% | KEV | KEV |
| CVE-2024-38094 | Authenticated deserialization RCE in Microsoft SharePoint Server | 7.2 | 51% | KEVRansomware | KEV |
CVE-2024-38812+1 related CVE | Unauthenticated RCE in VMware vCenter Server via DCERPC heap overflow | 9.8 | 55% | KEV | KEV |
| CVE-2024-4947 | V8 Type Confusion in Google Chrome Actively Exploited by Lazarus Group | 9.6 | 15% | KEVPoC | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Fortinet releases patches for publicly undisclosed critical FortiManager vulnerability In the last couple of days, Fortinet has released critical security updates for FortiManager, to fix a critical vulnerability that is reportedly being exploited by Chinese threat actors.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.