Week 25, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-2068 The c_rehash script allows command injection

  OpenSSL · OpenSSL

  EPSS 96%
• Critical 9.6
  CVE-2022-25772 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

  Mautic · Mautic

  EPSS 63%
• Critical 9.0
  CVE-2022-22980 SpEL Injection in Spring Data MongoDB
  EPSS 18%
• Critical 9.8
  CVE-2022-31767 IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-…

  IBM · CICS TX Advanced · CICS TX Standard

  EPSS 4.8%
• Critical 9.1
  CVE-2022-20829 Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

  Cisco · Cisco Adaptive Security Appliance (ASA) Software

  EPSS 3.5%
• Critical 10.0
  CVE-2022-2023 Incorrect Use of Privileged APIs in polonel/trudesk

  polonel · polonel/trudesk

  EPSS 3.3%
• Critical 9.6
  CVE-2022-2128 Unrestricted Upload of File with Dangerous Type in polonel/trudesk

  polonel · polonel/trudesk

  EPSS 2.9%
• Critical 9.8
  CVE-2022-1668 Secheron SEPCOS Control and Protection Relay

  Secheron · SEPCOS Control and Protection Relay firmware package

  EPSS 2.3%
• Critical 9.1
  CVE-2022-30117 Path traversal in Concrete CMS
  EPSS 2.1%
• Critical 9.8
  CVE-2022-33127 Improper handling of double quotes in file name in Diffy in Windows environment
  EPSS 1.8%
• Critical 10.0
  CVE-2022-1517 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

  Illumina · MiSeq Instrument · MiniSeq Instrument · MiSeq Dx

  EPSS 1.8%
• Critical 10.0
  CVE-2022-1518 3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

  Illumina · NextSeq 550 Instrument · iSeq 100 Instrument · NextSeq 550Dx

  EPSS 1.7%
• Critical 9.8
  CVE-2022-31800 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

  Phoenix Contact · RFC 430 ETH-IB · AXC 1050 XC · PC WORX SRT

  EPSS 1.6%
• Critical 10.0
  CVE-2022-1519 LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code th…

  Illumina · NextSeq 550 Instrument · iSeq 100 Instrument · NextSeq 550Dx

  EPSS 1.4%
• Critical 9.8
  CVE-2022-31802 Partial string comparison in CODESYS gateway server

  CODESYS · CODESYS Gateway Server V2

  EPSS 1.3%

All 23 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.0
  CVE-2022-34176 Cross-site Scripting in Jenkins JUnit Plugin

  Jenkins Project · Jenkins JUnit Plugin

  EPSS 78%
• Unscored
  CVE-2022-29775 iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.
  EPSS 61%
• Medium 6.5
  CVE-2022-20828 Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

  Cisco · Cisco FirePOWER Services Software for ASA

  EPSS 49%
• Unscored
  CVE-2022-1905 Events Made Easy < 2.2.81 - Unauthenticated SQLi
  EPSS 37%
• Medium 6.1
  CVE-2022-32209 Rails::Html::Sanitizer vulnerable to Cross-site Scripting
  EPSS 27%
• Unscored
  CVE-2022-31362 Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that…
  EPSS 18%
• Unscored
  CVE-2013-1916 In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting Wo…
  EPSS 13%
• Medium 6.1
  CVE-2022-34305 XSS in examples web application

  Apache Software Foundation · Apache Tomcat

  EPSS 6.7%