Week 17, 2019
22–28 April 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 71%
-
Critical 9.9
CVE-2019-8992 TIBCO Active Matrix Service Grid Administrator Remote Code ExecutionEPSS 2.1%
TIBCO Software · TIBCO Silver Fabric Enabler for ActiveMatrix BPM · TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric · TIBCO ActiveMatrix BPM
- Critical 9.8 EPSS 1.8%
- Critical 9.8 EPSS 1.5%
- Critical 9.6 EPSS 1.1%
- Critical 9.8
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.5
CVE-2019-2725 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6…EPSS 100%
-
High 8.0
CVE-2019-11539 In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secu…EPSS 99%
-
High 7.2
CVE-2019-2616 Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that…EPSS 92%
-
Unscored
CVE-2019-7214 SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when por…EPSS 85%
-
Unscored
CVE-2019-2578 Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 12.2.1…EPSS 71%
-
High 8.0
CVE-2019-11542 In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secu…EPSS 66%
- High 8.8 EPSS 61%
-
Unscored
CVE-2019-11577 dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.EPSS 53%
Advisories
- SUSE / openSUSE Security Updates 631 critical
- Debian Security (DSA / DLA) 15
- Ubuntu Security Notices (USN) 6
- Amazon Linux Security Center (ALAS) 51 critical
- BSI CERT-Bund (WID) 5
- Oracle Linux Security Advisories (ELSA) 3
- CISA ICS & IT advisories 21 critical
- ALAS2-2019-1195 Critical: thunderbird security update (Amazon Linux 2) 10 CVEs
- openSUSE-SU-2019:1273-1 Security update for python 2 CVEs
- ICSMA-19-113-01 Fujifilm FCR Capsula X/Carbon X 2 CVEs