Vulnerabilitycritical

CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022

Security Affairsby @securityaffairsAug 4, 2023 · 06:31 UTC (Aug 4, 2023)2 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-13379 CVE-2021-34473 CVE-2021-31207 CVE-2021-34523 CVE-2021-40539 CVE-2021-26084 CVE-2022-22954 CVE-2022-22960 CVE-2022-1388 CVE-2022-30190 CVE-2022-26134

Tags: cve-2018-13379 cve-2021-34473 cve-2021-31207 cve-2021-34523 cve-2021-40539 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2021-26084	Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability	9.8	100%	KEVRansomwarePoC	Aug 30, 2021 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2022-1388	Unauthenticated RCE in F5 BIG-IP via Missing Authentication	9.8	100%	KEVRansomwarePoC ×4	May 5, 2022 KEV May 10, 2022
CVE-2022-22954	Server-Side Template Injection RCE in VMware Workspace ONE Access and Identity Manager	9.8	100%	KEVRansomwarePoC	Apr 11, 2022 KEV Apr 14, 2022
CVE-2022-22960	Local Privilege Escalation in VMware Workspace ONE Access, Identity Manager and vRA	7.8	36%	KEVPoC ×3	Apr 13, 2022 KEV Apr 15, 2022
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022
CVE-2022-30190	MSDT URL Protocol Remote Code Execution in Microsoft Windows (Follina)	7.8	99%	KEVRansomwarePoC	Jun 1, 2022 KEV Jun 14, 2022

From the original article

2 min read at securityaffairs.com

CISA, the FBI, and NSA, along with Five Eyes cybersecurity agencies published a list of the 12 most exploited vulnerabilities of 2022. CISA, the NSA, and the FBI, in collaboration with cybersecurity authorities from Australia, Canada, New Zealand, and the United Kingdom, have published a list of the 12 most exploited vulnerabilities of 2022.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.