VulnerabilitycriticalExploited in the wild

CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

The Hacker Newsby @TheHackersNewsFeb 3, 2023 · 15:02 UTC (Feb 3, 2023)1 min read2

Read at thehackernews.com

Analyze CVE-2022-21587 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-21587 CVE-2023-22952 CVE-2017-11357

Tags: cve-2022-21587 cve-2023-22952 cve-2017-11357 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-11357	Unauthenticated Arbitrary File Upload/RCE in Progress Telerik UI for ASP.NET AJAX	9.8	78%	KEVRansomwarePoC	Aug 23, 2017 KEV Jan 26, 2023
CVE-2022-21587	Unauthenticated Arbitrary File Upload in Oracle E-Business Suite	9.8	98%	KEVRansomwarePoC	Oct 18, 2022 KEV Feb 2, 2023
CVE-2023-22952	Authenticated PHP Code Injection RCE in SugarCRM EmailTemplates	8.8	80%	KEVPoC	Jan 11, 2023 KEV Feb 2, 2023

From the original article

1 min read at thehackernews.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2 added two security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.