Week 43, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2023-46604 Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

  Apache Software Foundation · Apache ActiveMQ · Apache ActiveMQ Legacy OpenWire Module

  EPSS 100%
• Critical 9.8
  CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability

  VMware · VMware vCenter Server · VMware Cloud Foundation (VMware vCenter Server)

  EPSS 99%
• Critical 9.8
  CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability

  F5 · BIG-IP

  EPSS 97%
• Critical 9.8
  CVE-2023-43208 NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the inc…
  EPSS 86%
• Critical 9.8
  CVE-2023-46347 In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a guest can perform SQL injection. The m…
  EPSS 50%
• Critical 9.8
  CVE-2023-45498 VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.
  EPSS 22%
• Critical 9.7
  CVE-2023-45136 XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled

  xwiki · xwiki-platform

  EPSS 5.4%
• Critical 9.8
  CVE-2018-17558 Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.…
  EPSS 2.9%
• Critical 9.8
  CVE-2023-5746 A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via …

  Synology · Camera Firmware

  EPSS 2.3%
• Critical 9.1
  CVE-2023-45134 XWiki Platform XSS vulnerability from account in the create page form via template provider

  xwiki · xwiki-platform

  EPSS 2%
• Critical 9.8
  CVE-2023-45554 File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, a…
  EPSS 2%
• Critical 9.1
  CVE-2023-45135 XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title

  xwiki · xwiki-platform

  EPSS 1.9%
• Critical 10.0
  CVE-2023-37909 Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet

  xwiki · xwiki-platform

  EPSS 1.9%
• Critical 10.0
  CVE-2023-37912 XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

  xwiki · xwiki-rendering

  EPSS 1.5%
• Critical 10.0
  CVE-2023-37913 org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter

  xwiki · xwiki-platform

  EPSS 1.4%

All 47 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2023-20273 A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. Th…

  Cisco · Cisco IOS XE Software

  EPSS 93%
• High 8.6
  CVE-2023-43795 WPS Server Side Request Forgery in GeoServer

  geoserver · geoserver

  EPSS 69%
• Unscored
  CVE-2023-43622 Apache HTTP Server: DoS in HTTP/2 with initial windows size 0

  Apache Software Foundation · Apache HTTP Server

  EPSS 69%
• Unscored
  CVE-2023-46574 An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile func…
  EPSS 65%
• High 7.3
  CVE-2023-5830 ColumbiaSoft Document Locator WebTools login improper authentication

  ColumbiaSoft · Document Locator

  EPSS 62%
• Medium 6.5
  CVE-2023-31419 Elasticsearch StackOverflow vulnerability

  Elastic · Elasticsearch

  EPSS 61%
• High 7.6
  CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

  Kubernetes · ingress-nginx

  EPSS 54%
• Medium 5.4
  CVE-2023-46127 Frappe vulnerable to HTML injection by any Desk user

  Frappe Technologies · frappe

  EPSS 41%