Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

CISA adds Oracle, SugarCRM bugs to its Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairs ()1 min read1
Read at securityaffairs.com
Analyze CVE-2022-21587 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2022-21587CVE-2023-22952
Tags
cve-2022-21587cve-2023-22952exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-21587
Unauthenticated Arbitrary File Upload in Oracle E-Business Suite
9.898%KEVRansomwarePoC
KEV
CVE-2023-22952
Authenticated PHP Code Injection RCE in SugarCRM EmailTemplates
8.880%KEVPoC
KEV

From the original article

1 min read at securityaffairs.com

US CISA added actively exploited vulnerabilities in SugarCRM and Oracle products to its Known Exploited Vulnerabilities Catalog. The Cybersecurity and Infrastructure Security Agency (CISA) added Oracle and SugarCRM flaws, respectively tracked as CVE-2022-21587 and CVE-2023-22952 , to its Known Exploited Vulnerabilities Catalog . The CVE-2022-21587 flaw (CVSS score 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.