Week 46, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-43781 There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their userna…

  Atlassian · Bitbucket Server · Bitbucket Data Center

  EPSS 98%
• Critical 9.8
  CVE-2022-37109 patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt fi…
  EPSS 49%
• Critical 9.8
  CVE-2022-40881 SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
  EPSS 31%
• Critical 9.8
  CVE-2022-3980 An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between …

  Sophos · Sophos Mobile managed on-premises

  EPSS 9.8%
• Critical 9.8
  CVE-2022-3477 tagDiv Composer < 3.5 - Unauthenticated Account Takeover

  tagDiv · tagDiv Composer · Newspaper · Newsmag

  EPSS 5.1%
• Critical 9.8
  CVE-2022-45047 Apache MINA SSHD: Java unsafe deserialization vulnerability

  Apache Software Foundation · Apache MINA SSHD

  EPSS 3.8%
• Critical 9.8
  CVE-2022-45378 Apache SOAP allows unauthenticated users to potentially invoke arbitrary code

  Apache Software Foundation · Apache SOAP

  EPSS 3%
• Critical 9.8
  CVE-2022-45132 In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API…
  EPSS 2.1%
• Critical 9.8
  CVE-2022-44006 An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reachable, unauthentica…
  EPSS 2.1%
• Critical 9.8
  CVE-2022-40752 IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:  236687.

  IBM · InfoSphere DataStage

  EPSS 1.9%
• Critical 9.8
  CVE-2022-45136 Apache Jena SDB allows arbitrary deserialisation via JDBC

  Apache Software Foundation · Apache Jena SDB

  EPSS 1.8%
• Critical 9.8
  CVE-2022-3574 WPForms Pro < 1.7.7 - CSV Injection
  EPSS 1.7%
• Critical 9.8
  CVE-2022-42058 Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function. This vulnerability allows at…
  EPSS 1.7%
• Critical 9.8
  CVE-2022-44003 An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection a…
  EPSS 1.6%
• Critical 9.4
  CVE-2022-3993 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita

  Kareadita · kareadita/kavita

  EPSS 1.6%

All 50 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 4.3
  CVE-2022-3562 Cross-site Scripting (XSS) - Stored in librenms/librenms

  librenms · librenms/librenms

  EPSS 94%
• Low 3.4
  CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms

  librenms · librenms/librenms

  EPSS 94%
• Low 3.4
  CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms

  librenms · librenms/librenms

  EPSS 93%
• High 8.8
  CVE-2022-40127 Apache Airflow <2.4.0 has an RCE in a bash example

  Apache Software Foundation · Apache Airflow

  EPSS 86%
• High 7.2
  CVE-2022-42904 Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings.
  EPSS 83%
• Medium 6.1
  CVE-2022-45402 Apache Airflow: Open redirect during login

  Apache Software Foundation · Apache Airflow

  EPSS 81%
• High 7.6
  CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms

  librenms · librenms/librenms

  EPSS 38%
• Unscored
  CVE-2022-40843 The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to b…
  EPSS 29%