Week 8, 2021

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2021-21972 The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exp…
  EPSS 100%
• Critical 9.1
  CVE-2021-25282 SaltStack Salt Directory Traversal vulnerability
  EPSS 93%
• Critical 9.8
  CVE-2021-26120 PHP Code Injection by malicious function name in smarty
  EPSS 82%
• Critical 9.8
  CVE-2021-25281 SaltStack Salt Improper Authentication vulnerability
  EPSS 73%
• Critical 9.8
  CVE-2021-3197 SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
  EPSS 72%
• Critical 9.8
  CVE-2021-3120 An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote c…
  EPSS 37%
• Critical 9.8
  CVE-2021-24074 Windows TCP/IP Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 26%
• Critical 9.8
  CVE-2021-24094 Windows TCP/IP Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 22%
• Critical 10.0
  CVE-2021-1388 Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability

  Cisco · Cisco ACI Multi-Site Orchestrator Software

  EPSS 15%
• Critical 9.8
  CVE-2021-24078 Windows DNS Server Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2016

  EPSS 12%
• Critical 9.8
  CVE-2021-25283 SaltStack Salt Server Side Template Injection
  EPSS 10%
• Critical 9.8
  CVE-2021-3148 SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
  EPSS 8.2%
• Critical 9.1
  CVE-2021-3144 SaltStack Salt eauth tokens can be used once after expiration
  EPSS 5.2%
• Critical 9.8
  CVE-2021-24077 Windows Fax Service Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 2.9%
• Critical 9.6
  CVE-2020-27224 Cross-site Scripting (XSS) in Eclipse Theia

  The Eclipse Foundation · Eclipse Theia

  EPSS 2.6%

All 23 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 5.3
  CVE-2021-21973 The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malici…
  EPSS 88%
• Medium 5.4
  CVE-2021-21618 Stored XSS vulnerability in Jenkins Repository Connector Plugin

  Jenkins Project · Jenkins Repository Connector Plugin

  EPSS 79%
• High 7.8
  CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 78%
• Medium 5.2
  CVE-2020-27223 DOS vulnerability for Quoted Quality CSV headers

  The Eclipse Foundation · Eclipse Jetty

  EPSS 78%
• Medium 4.6
  CVE-2021-21616 Stored XSS vulnerability in Jenkins Active Choices Plugin

  Jenkins Project · Jenkins Active Choices Plugin

  EPSS 76%
• High 7.3
  CVE-2020-28429 Command Injection
  EPSS 63%
• Unscored
  CVE-2021-27670 Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
  EPSS 61%
• High 7.5
  CVE-2021-24086 Windows TCP/IP Denial of Service Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 59%