CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-2551 | Unauthenticated Remote Code Execution in Oracle WebLogic Server via IIOP | 9.8 | 93% | KEV | KEV |
| CVE-2023-1671 | Command Injection RCE in Sophos Web Appliance Warn-Proceed Handler | 9.8 | 100% | KEVPoC | KEV |
| CVE-2023-2551 | PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1 | 8.8 | 2% | PoC | |
| CVE-2023-34992 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized… | 9.8 | 80% | ||
| CVE-2023-36553 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and… | 9.8 | 2% | ||
| CVE-2023-36584 | Mark of the Web (MOTW) Security Feature Bypass in Microsoft Windows | 5.4 | 3% | KEV | KEV |
| CVE-2023-36884 | Race Condition RCE in Microsoft Windows Search | 7.5 | 99% | KEVRansomware | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | harvard.edu | entified a subdomain of the Harvard University – courses.my.harvard[.]edu – that was susceptible to CVE-2020-2551. On the other han |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Nov 17, 2023 Patch Management / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities ( KEV ) catalog based on evidence of active exploitation in the wild.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.