Week 46, 2023

13–19 November 2023

New CVEs: 745
Critical: 40
High: 225
Newly exploited: 12
Advisories: 378
Malicious pkgs: 31

Newly exploited 12

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2023-1671 KEV Nov 16, 2023 A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
Sophos · Sophos Web Appliance

EPSS 100%
Critical 9.8
CVE-2020-2551 KEV Nov 16, 2023 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3…
Oracle · WebLogic Server

EPSS 93%
Medium 5.4
CVE-2023-36584 KEV Nov 16, 2023 Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 3.3%
High 8.8
CVE-2023-36025 KEV Nov 14, 2023 Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 88%
High 7.8
CVE-2023-36036 KEV Nov 14, 2023 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 17%
High 7.8
CVE-2023-36033 KEV Nov 14, 2023 Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 11%
Critical 9.8
CVE-2023-47246 KEV Nov 13, 2023 · ransomware In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited…
EPSS 99%
Critical 9.8
CVE-2023-36845 KEV Nov 13, 2023 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Juniper Networks · Junos OS

EPSS 95%
Medium 5.3
CVE-2023-36851 KEV Nov 13, 2023 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
Juniper Networks · Junos OS

EPSS 1.1%
Medium 5.3
CVE-2023-36844 KEV Nov 13, 2023 Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
Juniper Networks · Junos OS

EPSS 90%
Medium 5.3
CVE-2023-36847 KEV Nov 13, 2023 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Juniper Networks · Junos OS

EPSS 83%
Medium 5.3
CVE-2023-36846 KEV Nov 13, 2023 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Juniper Networks · Junos OS

EPSS 93%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2023-44353 ColdFusion WDDX Deserialization Gadgets
Adobe · ColdFusion

EPSS 80%
Critical 9.8
CVE-2023-6019 Ray Command Injection in cpu_profile Parameter
ray-project · ray-project/ray

EPSS 75%
Critical 9.8
CVE-2023-44350 ColdFusion | Deserialization of Untrusted Data (CWE-502)
Adobe · ColdFusion

EPSS 65%
Critical 9.8
CVE-2023-44351 Adobe ColdFusion RCE Security Vulnerability
Adobe · ColdFusion

EPSS 50%
Critical 10.0
CVE-2023-6018 MLflow Arbitrary File Write
MLflow · mlflow/mlflow

EPSS 48%
Critical 9.6
CVE-2023-48365 Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP hea…
EPSS 48%
Critical 10.0
CVE-2023-6016 H2O Remote Code Execution via POJO Model Import
h2oai · h2oai/h2o-3

EPSS 31%
Critical 9.3
CVE-2023-34991 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4…
Fortinet · FortiWLM

EPSS 29%
Critical 9.8
CVE-2023-36397 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 18%
Critical 10.0
CVE-2023-6015 MLflow Arbitrary File Upload
MLflow · mlflow/mlflow

EPSS 4.5%
Critical 9.3
CVE-2023-6038 Local File Inclusion in h2oai/h2o-3
h2oai · h2oai/h2o-3

EPSS 4.3%
Critical 9.8
CVE-2023-36028 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.8%
Critical 9.8
CVE-2023-45616 There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially…
Hewlett Packard Enterprise (HPE) · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Ha

EPSS 2.1%
Critical 9.8
CVE-2023-45615 There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted p…
Hewlett Packard Enterprise (HPE) · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Ha

EPSS 2.1%
Critical 9.8
CVE-2023-45614 There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted p…
Hewlett Packard Enterprise (HPE) · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Ha

EPSS 2.1%

All 40 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

WID-SEC-2023-2890 Microsoft Windows: Mehrere Schwachstellen 32 CVEs
SSA-137900 SSA-137900: Multiple Vulnerabilities in COMOS 16 CVEs
ICSA-23-320-09 Siemens COMOS 16 CVEs
SSA-150063 SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0 13 CVEs
ICSA-23-320-08 Siemens SCALANCE Family Products 13 CVEs
SSA-699386 SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 13 CVEs
ICSA-23-320-12 Siemens PNI 13 CVEs
USN-6475-1 cobbler vulnerabilities 11 CVEs
SSA-617233 SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices 9 CVEs
ICSA-23-320-10 Siemens SIPROTEC 4 7SJ66 9 CVEs