Week 37, 2020

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2020-25213 The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsaf…
  EPSS 97%
• Critical 9.8
  CVE-2020-11998 Remote code execution in Apache ActiveMQ
  EPSS 49%
• Critical 9.1
  CVE-2020-6318 A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an atta…

  SAP · SAP NetWeaver ABAP Server and ABAP Platform

  EPSS 5.8%
• Critical 9.8
  CVE-2020-2040 PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled

  Palo Alto Networks · PAN-OS

  EPSS 3.9%
• Critical 9.0
  CVE-2020-9732 Stored XSS in AEM Sites Components

  Adobe · Experience Manager

  EPSS 2.8%
• Critical 9.9
  CVE-2020-1595 Microsoft SharePoint Remote Code Execution Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Foundation 2013 Service Pack 1

  EPSS 2%
• Critical 9.9
  CVE-2020-1210 Microsoft SharePoint Remote Code Execution Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Enterprise Server 2013 Service Pack 1

  EPSS 1.9%
• Critical 9.0
  CVE-2020-9734 Stored XSS in AEM Forms component

  Adobe · Experience Manager

  EPSS 1.9%
• Critical 9.0
  CVE-2020-9741 Stored XSS in AEM Forms Components

  Adobe · Experience Manager

  EPSS 1.9%
• Critical 9.0
  CVE-2020-9740 Stored XSS in AEM Design Importer Component

  Adobe · Experience Manager

  EPSS 1.9%
• Critical 9.0
  CVE-2020-9742 Reflected XSS in AEM Inbox module

  Adobe · Experience Manager

  EPSS 1.8%
• Critical 9.8
  CVE-2020-15786 A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. …

  Siemens · SIMATIC HMI Comfort Panels (incl. SIPLUS variants) · SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) · SIMATIC HMI Unified Comfort Panels

  EPSS 1.5%
• Critical 9.6
  CVE-2020-6320 SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted. Limited knowledge of payload is…

  SAP · SAP Marketing (Mobile Channel Servlet)

• Critical 9.8
  GHSA-2vqq-jgxx-fxjc Malicious Package in motiv.scss
• Critical 9.8
  GHSA-4wcx-c9c4-89p2 Malicious Package in react-datepicker-plus

All 36 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2020-2038 PAN-OS: OS command injection vulnerability in the management web interface

  Palo Alto Networks · PAN-OS

  EPSS 86%
• Unscored
  CVE-2020-11991 When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any fi…
  EPSS 73%
• High 7.5
  CVE-2020-17408 This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not require…

  NEC · ExpressCluster

  EPSS 71%
• High 8.4
  CVE-2020-16875 Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft · Microsoft Exchange Server 2016 Cumulative Update 17 · Microsoft Exchange Server 2019 Cumulative Update 6 · Microsoft Exchange Server 2016 Cumulative Update 16

  EPSS 47%
• Medium 5.3
  CVE-2020-2039 PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload

  Palo Alto Networks · PAN-OS

  EPSS 46%
• High 7.8
  CVE-2020-1074 Jet Database Engine Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 46%
• High 8.8
  CVE-2020-2036 PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface

  Palo Alto Networks · PAN-OS

  EPSS 24%
• Unscored
  CVE-2020-11117 u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code…

  Qualcomm · Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking

  EPSS 20%