Week 15, 2017
10–16 April 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2016-1908 The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisio…EPSS 14%
-
Critical 9.8
CVE-2016-4800 Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted requestEPSS 6.5%
- Critical 9.8 EPSS 3.4%
- Critical 9.8 EPSS 2.6%
- Critical EPSS 1%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.8
CVE-2017-0199 Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, W…EPSS 99%
-
Unscored
CVE-2016-7552 On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to …EPSS 93%
-
Unscored
CVE-2016-7547 A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.EPSS 92%
- High 8.8 EPSS 91%
-
Unscored
CVE-2016-2555 SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriend…EPSS 80%
-
Unscored
CVE-2016-5312 Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary fil…EPSS 54%
-
Unscored
CVE-2017-0202 A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way…EPSS 46%
-
Unscored
CVE-2017-7696 SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width a…EPSS 36%
Advisories
- Debian Security (DSA / DLA) 12
- SUSE / openSUSE Security Updates 10
- Oracle Linux Security Advisories (ELSA) 8
- Ubuntu Security Notices (USN) 3
- CISA ICS & IT advisories 32 critical
- BSI CERT-Bund (WID) 1
- ICSA-17-103-02A Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A) 2 CVEs
- ICSA-17-101-01 Schneider Electric Modicon Modbus Protocol 2 CVEs