Week 29, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-35405 Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEn…
  EPSS 100%
• Critical 9.8
  CVE-2022-26138 The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the usern…

  Atlassian · Questions For Confluence

  EPSS 98%
• Critical 9.8
  CVE-2022-2143 Advantech iView

  Advantech iView · iView

  EPSS 63%
• Critical 9.8
  CVE-2022-33318 Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENES…

  Mitsubishi Electric · Mitsubishi Electric Iconics Digital Solutions · MC Works64 · GENESIS64

  EPSS 50%
• Critical 9.8
  CVE-2022-24082 If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly…

  Pega Systems · Pega Infinity

  EPSS 12%
• Critical 9.9
  CVE-2022-25759 Remote Code Injection
  EPSS 12%
• Critical 9.8
  CVE-2022-26136 A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impa…

  Atlassian · Confluence Data Center · Confluence Server · Crucible

  EPSS 5.7%
• Critical 9.8
  CVE-2022-34487 WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

  biplob018 · Shortcode Addons (WordPress plugin)

  EPSS 3.3%
• Critical 9.8
  CVE-2022-33198 WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability

  Biplob Adhikari · Accordions (WordPress plugin)

  EPSS 3.3%
• Critical 9.8
  CVE-2022-35912 Grails framework Remote Code Execution via Data Binding
  EPSS 2.3%
• Critical 9.1
  CVE-2022-28700 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability

  GiveWP · GiveWP (WordPress plugin)

  EPSS 2.1%
• Critical 9.8
  CVE-2022-2437 Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization

  SlickRemix · Feed Them Social – Social Media Feeds, Video, and Photo Galleries

  EPSS 1.7%
• Critical 9.8
  CVE-2022-34983 The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
  EPSS 1.7%
• Critical 9.8
  CVE-2015-8031 Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
  EPSS 1.7%
• Critical 9.8
  CVE-2022-32456 Data Systems Consulting Co., Ltd. BPM - SQL Injection

  Data Systems Consulting · BPM

  EPSS 1.6%

All 26 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2022-33891 Apache Spark shell command injection vulnerability via Spark UI

  Apache Software Foundation · Apache Spark

  EPSS 93%
• High 7.5
  CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

  Apache Software Foundation · Apache Xalan-J

  EPSS 82%
• High 8.0
  CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

  WAVLINK · WN535K3 · WN535K2

  EPSS 79%
• Medium 6.3
  CVE-2022-21550 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.36 and prior, 7.5.26 and…

  Oracle · MySQL Cluster

  EPSS 51%
• High 8.0
  CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

  WAVLINK · WN535K3 · WN535K2

  EPSS 33%
• High 8.0
  CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection

  WAVLINK · WN535K2 · WN535K3

  EPSS 30%
• High 8.8
  CVE-2022-1096 Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  Google · Chrome

  EPSS 25%
• Unscored
  CVE-2022-34047 An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety…
  EPSS 22%