Week 20, 2020

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2018-1285 XML External Entity attack in log4net
  EPSS 18%
• Critical 9.9
  CVE-2020-13126 An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An att…
  EPSS 8.6%
• Critical 9.8
  CVE-2020-11973 Apache Camel Netty enables Java deserialization by default
  EPSS 6.8%
• Critical 9.8
  CVE-2020-11972 Deserialization of Untrusted Data in Apache Camel RabbitMQ
  EPSS 5.7%
• Critical 9.8
  CVE-2020-8159 Arbitrary file write in actionpack-page_caching gem
  EPSS 5.4%
• Critical 9.8
  CVE-2020-13109 Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem beca…
  EPSS 4.9%
• Critical 9.8
  CVE-2020-13092 scikit-learn Deserialization of Untrusted Data
  EPSS 3.5%
• Critical 9.0
  CVE-2020-10022 UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array

  zephyrproject-rtos · Zephyr

  EPSS 2.3%
• Critical 9.9
  CVE-2020-11057 Code Injection in XWiki Platform

  xwiki · xwiki-platform

  EPSS 2.2%
• Critical 9.8
  CVE-2020-8149 Arbitrary shell command execution in logkitty
  EPSS 2%
• Critical 9.1
  CVE-2020-6248 SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP o…

  SAP · SAP Adaptive Server Enterprise (Backup Server)

  EPSS 1.9%
• Critical 9.0
  CVE-2020-2018 PAN-OS: Panorama authentication bypass vulnerability

  Palo Alto Networks · PAN-OS

  EPSS 1.4%
• Critical 9.8
  CVE-2020-12889 Maltego incorrectly shares a MISP connection across users in a remote-transform use case
  EPSS 1.2%
• Critical 9.9
  CVE-2020-6262 Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740) allows an attacke…

  SAP · SAP Application Server ABAP (ST-PI)

  EPSS 1.2%
• Critical 9.0
  CVE-2020-8100 Incomplete validation in detection code in Bitdefender Engines (VA-8589)

  Bitdefender · Bitdefender Engines

  EPSS 1%

All 17 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2020-11108 The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing…
  EPSS 78%
• High 7.5
  CVE-2020-11971 Improper Input Validation in Apache Camel
  EPSS 14%
• Unscored
  CVE-2019-16112 TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java object to the recorder/ServiceManager?servic…
  EPSS 11%
• Unscored
  CVE-2020-12834 eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthe…
  EPSS 11%
• High 7.4
  CVE-2020-11060 Remote Code Execution in GLPI

  GLPI · glpi

  EPSS 11%
• Medium 6.1
  CVE-2020-1941 Apache ActiveMQ webconsole admin GUI is open to XSS
  EPSS 7.2%
• Unscored
  CVE-2020-12832 WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly…
  EPSS 7.1%
• Unscored
  CVE-2020-12651 SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line numb…
  EPSS 6.6%