Exploit / PoChighExploited in the wild

U.S. CISA adds Microsoft .NET Framework, Apache OFBiz, and Paessler PRTG Network Monitor flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsFeb 5, 2025 · 15:03 UTC (Feb 5, 2025)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-45195 CVE-2024-29059 CVE-2018-9276 CVE-2018-19410

Tags: cve-2024-45195 cve-2024-29059 cve-2018-9276 cve-2018-19410 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-19410	Unauthenticated LFI in Paessler PRTG Enables Admin Account Creation	9.8	98%	KEV	Nov 21, 2018 KEV Feb 4, 2025
CVE-2018-9276	Authenticated OS Command Injection in Paessler PRTG Network Monitor < 18.2.39	7.2	87%	KEVPoC ×3	Jul 2, 2018 KEV Feb 4, 2025
CVE-2024-29059	Information Disclosure in Microsoft .NET Framework	7.5	99%	KEV	Mar 23, 2024 KEV Feb 4, 2025
CVE-2024-45195	Forced Browsing (Improper Authorization) in Apache OFBiz	7.5	100%	KEV	Sep 4, 2024 KEV Feb 4, 2025

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.