Vulnerabilitycritical

Major Cybersecurity Agencies Collaborate to Unveil 2022's Most Exploited Vulnerabilities

The Hacker Newsby @TheHackersNewsAug 4, 2023 · 07:02 UTC (Aug 4, 2023)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-13379 CVE-2021-34473 CVE-2021-31207 CVE-2021-34523 CVE-2021-40539 CVE-2021-26084 CVE-2021-44228 CVE-2022-22954 CVE-2022-22960 CVE-2022-1388 CVE-2022-30190 CVE-2022-26134

Tags: cve-2018-13379 cve-2021-34473 cve-2021-31207 cve-2021-34523 cve-2021-40539 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2021-26084	Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability	9.8	100%	KEVRansomwarePoC	Aug 30, 2021 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2022-1388	Unauthenticated RCE in F5 BIG-IP via Missing Authentication	9.8	100%	KEVRansomwarePoC ×4	May 5, 2022 KEV May 10, 2022
CVE-2022-22954	Server-Side Template Injection RCE in VMware Workspace ONE Access and Identity Manager	9.8	100%	KEVRansomwarePoC	Apr 11, 2022 KEV Apr 14, 2022
CVE-2022-22960	Local Privilege Escalation in VMware Workspace ONE Access, Identity Manager and vRA	7.8	36%	KEVPoC ×3	Apr 13, 2022 KEV Apr 15, 2022
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022
CVE-2022-30190	MSDT URL Protocol Remote Code Execution in Microsoft Windows (Follina)	7.8	99%	KEVRansomwarePoC	Jun 1, 2022 KEV Jun 14, 2022

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 04, 2023 Software Security / Cyber Theat A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.