Week 17, 2017
24–30 April 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2017-3066 Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability …EPSS 91%
- Critical 9.8 EPSS 6.2%
-
Critical 9.9
CVE-2016-6902 lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.EPSS 5.5%
-
Critical 9.9
CVE-2016-6903 lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.EPSS 5%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.8
CVE-2017-8291 Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring …EPSS 97%
-
High 7.4
CVE-2017-3506 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6…EPSS 96%
-
Unscored
CVE-2017-3599 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier…EPSS 90%
-
Unscored
CVE-2017-3548 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are …EPSS 52%
-
Unscored
CVE-2015-7245 Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive informati…EPSS 45%
-
Unscored
CVE-2017-6553 Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT…EPSS 42%
-
High 8.8
CVE-2017-5030 Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote a…EPSS 41%
-
Unscored
CVE-2017-8220 TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell …EPSS 37%
Advisories
- Debian Security (DSA / DLA) 262 critical
- SUSE / openSUSE Security Updates 11
- Ubuntu Security Notices (USN) 8
- BSI CERT-Bund (WID) 6
- CISA ICS & IT advisories 52 critical
- ICSA-17-115-04 Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 5 CVEs
- DSA-3835-1 python-django - security update 4 CVEs
- ICSA-17-115-02 Sierra Wireless AirLink Raven XE and XT 3 CVEs
- DLA-924-1 tomcat7 - security update 2 CVEs