Week 18, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-25826 Remote Code Execution in OpenTSDB

  OpenTSDB · OpenTSDB

  EPSS 43%
• Critical 9.8
  CVE-2023-1730 SupportCandy < 3.1.5 - Unauthenticated SQLi
  EPSS 41%
• Critical 10.0
  CVE-2023-2564 OS Command Injection in sbs20/scanservjs

  sbs20 · sbs20/scanservjs

  EPSS 41%
• Critical 9.8
  CVE-2023-20126 Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability

  Cisco · Cisco Small Business IP Phones

  EPSS 37%
• Critical 9.1
  CVE-2022-47878 Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as We…
  EPSS 36%
• Critical 9.8
  CVE-2023-30013 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability all…
  EPSS 26%
• Critical 9.8
  CVE-2023-2479 OS Command Injection in appium/appium-desktop

  appium · appium/appium-desktop

  EPSS 22%
• Critical 9.8
  CVE-2023-29778 GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.
  EPSS 16%
• Critical 9.1
  CVE-2022-47876 The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts.
  EPSS 7%
• Critical 9.8
  CVE-2023-29827 ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration se…
  EPSS 5.6%
• Critical 9.3
  CVE-2022-3405 Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber P…

  Acronis · Acronis Cyber Protect 15 · Acronis Cyber Backup 12.5

  EPSS 5.3%
• Critical 9.3
  CVE-2022-30995 Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29…

  Acronis · Acronis Cyber Protect 15 · Acronis Cyber Backup 12.5

  EPSS 3.3%
• Critical 9.8
  CVE-2023-30869 WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

  Easy Digital Downloads · Easy Digital Downloads

  EPSS 3.1%
• Critical 9.6
  CVE-2022-47877 A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via th…
  EPSS 2.6%
• Critical 9.8
  CVE-2023-30135 Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function.
  EPSS 2.4%

All 37 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2023-31099 Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.
  EPSS 82%
• High 8.8
  CVE-2023-32007 Apache Spark: Shell command injection via Spark UI

  Apache Software Foundation · Apache Spark

  EPSS 76%
• High 7.5
  CVE-2023-32235 Path Traversal in Ghost
  EPSS 39%
• Medium 4.7
  CVE-2023-2522 Chengdu VEC40G Network Detection os command injection

  Chengdu · VEC40G

  EPSS 34%
• High 7.3
  CVE-2023-2523 Weaver E-Office unrestricted upload

  Weaver · E-Office

  EPSS 33%
• High 7.2
  CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys

  unilogies · unilogies/bumsys

  EPSS 29%
• Medium 5.4
  CVE-2023-1861 Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
  EPSS 29%
• Medium 6.5
  CVE-2022-47874 Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.…
  EPSS 21%