RansomwarecriticalExploited in the wild

Security Affairs newsletter Round 487 by Pierluigi Paganini

Security Affairsby @securityaffairsSep 1, 2024 · 08:55 UTC (Sep 1, 2024)3 min read3 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-37085 CVE-2023-22527

Tags: cve-2024-37085 cve-2023-22527 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22527	Unauthenticated OGNL Template Injection RCE in Atlassian Confluence Data Center/Server	9.8	100%	KEVRansomwarePoC ×2	Jan 16, 2024 KEV Jan 24, 2024
CVE-2024-37085	Authentication Bypass in VMware ESXi via AD Group Recreation	7.2	27%	KEVRansomware	Jun 25, 2024 KEV Jul 30, 2024

From the original article

3 min read at securityaffairs.com

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.