Week 49, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-50164 Apache Struts: File upload component had a directory traversal vulnerability

  Apache Software Foundation · Apache Struts

  EPSS 81%
• Critical 9.6
  CVE-2023-22524 Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypas…

  Atlassian · Companion for Mac

  EPSS 25%
• Critical 9.0
  CVE-2023-22522 This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page…

  Atlassian · Confluence Server · Confluence Data Center

  EPSS 13%
• Critical 9.8
  CVE-2023-22523 This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. T…

  Atlassian · Assets Discovery Data Center · Assets Discovery Cloud

  EPSS 11%
• Critical 9.8
  CVE-2023-40077 In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no add…

  Google · Android

  EPSS 8.4%
• Critical 9.8
  CVE-2023-48316 Azure RTOS NetX Duo Remote Code Execution Vulnerability

  azure-rtos · netxduo

  EPSS 4.3%
• Critical 9.1
  CVE-2023-48692 Azure RTOS NetX Duo Remote Code Execution Vulnerability

  azure-rtos · netxduo

  EPSS 3.1%
• Critical 9.6
  CVE-2023-35618 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Microsoft · Microsoft Edge (Chromium-based)

  EPSS 2.9%
• Critical 9.8
  CVE-2023-49437 Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
  EPSS 2.4%
• Critical 9.8
  CVE-2023-49093 HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

  HtmlUnit · htmlunit

  EPSS 2.4%
• Critical 9.8
  CVE-2023-41913 strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in cha…
  EPSS 2.3%
• Critical 9.8
  CVE-2023-6448 Unitronics VisiLogic uses a default administrative password

  Unitronics · VisiLogic

  EPSS 2.1%
• Critical 10.0
  CVE-2023-6269 Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF

  Atos Unify · OpenScape Branch · OpenScape Session Border Controller (SBC) · OpenScape BCF

  EPSS 1.9%
• Critical 9.9
  CVE-2023-4122 Student Information System v1.0 - Insecure File Upload

  Kashipara · Student Information System

  EPSS 1.5%
• Critical 9.8
  CVE-2023-40301 NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
  EPSS 1.5%

All 34 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2023-49070 Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

  Apache Software Foundation · Apache OFBiz

  EPSS 95%
• High 8.6
  CVE-2023-49285 Denial of Service in HTTP Message Processing in Squid

  squid-cache · squid

  EPSS 88%
• High 7.2
  CVE-2023-44221 Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to …

  SonicWall · SMA100

  EPSS 76%
• Unscored
  CVE-2023-6063 WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection
  EPSS 74%
• High 8.0
  CVE-2023-47565 Legacy VioStor NVR

  QNAP Systems · VioStor NVR

  EPSS 73%
• Unscored
  CVE-2023-48123 An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the pa…
  EPSS 68%
• High 8.8
  CVE-2023-49897 An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerabilit…

  FXC · AE1021PE · AE1021

  EPSS 50%
• High 7.2
  CVE-2022-45362 WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)

  Paytm · Paytm Payment Gateway

  EPSS 42%