Vulnerabilitymedium

US, UK, and Australian agencies warn of top routinely exploited issues

Security Affairsby @securityaffairsJul 28, 2021 · 20:29 UTC (Jul 28, 2021)1 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065 CVE-2021-22893 CVE-2021-22894 CVE-2021-22899 CVE-2021-22900 CVE-2021-27101 CVE-2021-27102 CVE-2021-27103 CVE-2021-27104 CVE-2021-21985 CVE-2018-13379 CVE-2020-12812 CVE-2019-5591

Tags: cve-2021-26855 cve-2021-26857 cve-2021-26858 cve-2021-27065 cve-2021-22893 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-5591	Default-Configuration LDAP Impersonation in Fortinet FortiOS	6.5	19%	KEVRansomware	Aug 14, 2020 KEV Nov 3, 2021
CVE-2020-12812	MFA Bypass via Username Case Change in Fortinet FortiOS SSL VPN	9.8	45%	KEVRansomware	Jul 24, 2020 KEV Nov 3, 2021
CVE-2021-21985	Remote Code Execution in VMware vCenter Server vSAN Health Check plug-in	9.8	100%	KEVRansomwarePoC	May 26, 2021 KEV Nov 3, 2021
CVE-2021-22893	Use-After-Free RCE in Ivanti Pulse Connect Secure License Services	10.0	47%	KEVRansomware	Apr 23, 2021 KEV Nov 3, 2021
CVE-2021-22894 +2 related CVEs CVE-2021-22899 CVE-2021-22900	Authenticated Buffer Overflow RCE in Ivanti Pulse Connect Secure Collaboration Suite	8.8 group max	41%	KEV	May 27, 2021 KEV Nov 3, 2021
CVE-2021-26855 +3 related CVEs CVE-2021-27065 CVE-2021-26857 CVE-2021-26858	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1 group max	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021
CVE-2021-27104 +3 related CVEs CVE-2021-27103 CVE-2021-27101 CVE-2021-27102	Unauthenticated OS Command Injection in Accellion FTA Admin Endpoints	9.8 group max	57%	KEVRansomware	Feb 16, 2021 KEV Nov 3, 2021

From the original article

1 min read at securityaffairs.com

A joint report published by US, UK, and Australian cyber security agencies warns of the top routinely exploited vulnerabilities in 2020. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.