Week 33, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.1
  CVE-2022-34253 Adobe Commerce XML Injection Arbitrary code execution

  Adobe · Magento Commerce

  EPSS 5.2%
• Critical 9.8
  CVE-2022-34916 Improper Input Validation (JNDI Injection) in JMSMessageConsumer

  Apache Software Foundation · Apache Flume

  EPSS 3%
• Critical 9.8
  CVE-2022-2818 Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

  cockpit-hq · cockpit-hq/cockpit

  EPSS 1.7%
• Critical 10.0
  CVE-2022-36010 Arbitrary code execution via function parsing in react-editable-json-tree

  oxyno-zeta · react-editable-json-tree

  EPSS 1.5%
• Critical 9.8
  CVE-2022-35540 Use of Hard-coded Credentials in AgileConfig.Client
  EPSS 1.5%
• Critical 9.8
  CVE-2022-2821 Missing Critical Step in Authentication in namelessmc/nameless

  NamelessMC · namelessmc/nameless

  EPSS 1.4%
• Critical 9.0
  CVE-2022-35975 Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode

  weaveworks · vscode-gitops-tools

  EPSS 1.4%
• Critical 9.8
  CVE-2022-25899 Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to poten…
  EPSS 1.2%
• Critical 9.8
  CVE-2020-36599 OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
  EPSS 1.2%
• Critical 9.8
  CVE-2022-36599 Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
  EPSS 1.1%
• Critical 9.8
  CVE-2022-36272 Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter
  EPSS 1.1%
• Critical 9.8
  CVE-2022-2336 Softing Secure Integration Server Improper Authentication

  Softing · Secure Integration Server · edgeAggregator · edgeConnector Siemens

  EPSS 1.1%
• Critical 9.8
  CVE-2022-22730 Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable esca…
• Critical 9.6
  CVE-2022-2662 Sequi PortBloque S Improper Authentication

  Sequi · PortBloque S

• Critical 9.1
  CVE-2022-1399 Remote code execution in scheduled tasks component

  Device42 · CMDB

All 18 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2022-37061 All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute…
  EPSS 100%
• Medium 4.8
  CVE-2022-34258 Adobe Commerce Stored XSS Arbitrary code execution

  Adobe · Magento Commerce

  EPSS 70%
• Unscored
  CVE-2022-29805 A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a craft…
  EPSS 28%
• Unscored
  CVE-2022-36309 Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit…

  Airspan Networks · AirVelocity

  EPSS 25%
• Medium 6.9
  CVE-2022-1401 Insufficient validation of provided paths in Exago WrImageResource.axd

  Device42 · CMDB

  EPSS 19%
• Unscored
  CVE-2022-37060 FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An unauthentica…
  EPSS 19%
• Unscored
  CVE-2022-2314 VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
  EPSS 17%
• High 8.8
  CVE-2020-14321 Moodle Incorrect Authorization vulnerability
  EPSS 16%