CISA adds dozens of vulnerabilities to catalog of exploited bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-18362 | Unauthenticated SQL Injection in Kaseya VSA ConnectWise ManagedITSync Integration | 9.8 | 87% | KEVRansomwarePoC | KEV |
| CVE-2020-0638 | Local Privilege Escalation in Microsoft Update Notification Manager (Windows 10/Server) | 7.8 | 2% | KEVRansomware | KEV |
From the original article
2 min read at therecord.media
The Cybersecurity and Infrastructure Security Agency (CISA) added 41 vulnerabilities to its catalog of known exploited bugs this week, one of the largest batches of additions to the list since CISA began compiling it in November . Dozens of the vulnerabilities are years old and federal civilian agencies have been given until June 13 and 14 to apply the patches or disconnect the ones that are end-of-life.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.