Week 50, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-6553 Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

  Inisev · BackupBliss – Backup & Migration with Free Cloud Storage

  EPSS 98%
• Critical 10.0
  CVE-2023-50721 XWiki Platform RCE from account through SearchAdmin

  xwiki · xwiki-platform

  EPSS 79%
• Critical 9.8
  CVE-2023-48085 Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.
  EPSS 76%
• Critical 9.6
  CVE-2023-36019 Microsoft Power Platform Connector Spoofing Vulnerability

  Microsoft · Azure Logic Apps · Microsoft Power Platform

  EPSS 16%
• Critical 9.8
  CVE-2023-29234 Bypass serialize checks in Apache Dubbo

  Apache Software Foundation · Apache Dubbo

  EPSS 7.4%
• Critical 9.8
  CVE-2023-43364 Searchor CLI's Search vulnerable to Arbitrary Code using Eval
  EPSS 2.9%
• Critical
  CVE-2023-49898 Apache StreamPark (incubating): Authenticated system users could trigger remote command execution

  Apache Software Foundation · Apache StreamPark (incubating)

  EPSS 2.3%
• Critical 9.8
  CVE-2013-2513 flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution
  EPSS 1.7%
• Critical 9.6
  CVE-2023-6572 Command Injection in gradio-app/gradio

  gradio-app · gradio-app/gradio

  EPSS 1.7%
• Critical 9.8
  CVE-2023-46279 Apache Dubbo: Bypass deny serialize list check in Apache Dubbo

  Apache Software Foundation · Apache Dubbo

  EPSS 1.7%
• Critical 9.8
  CVE-2023-42495 Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

  Dasan Networks · Dasan Networks

  EPSS 1.5%
• Critical 9.1
  CVE-2023-50422 Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)

  SAP · cloud-security-services-integration-library

  EPSS 1.4%
• Critical 9.3
  CVE-2023-46116 Remote Code Execution via insufficiently sanitized call to shell.openExternal

  tutao · tutanota

  EPSS 1.3%
• Critical 10.0
  CVE-2023-50723 XWiki Platform remote code execution/programming rights with configuration section from any user account

  xwiki · xwiki-platform

  EPSS 1.2%
• Critical 9.8
  CVE-2021-42796 An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary command…
  EPSS 1.1%

All 43 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.1
  CVE-2023-35628 Windows MSHTML Platform Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 93%
• Medium 6.3
  CVE-2023-6895 Hikvision Intercom Broadcasting System ping.php os command injection

  Hikvision · Intercom Broadcasting System

  EPSS 89%
• High 7.5
  CVE-2023-50719 XWiki Platform Solr search discloses password hashes of all users

  xwiki · xwiki-platform

  EPSS 84%
• Medium 4.3
  CVE-2023-6893 Hikvision Intercom Broadcasting System exportrecord.php path traversal

  Hikvision · Intercom Broadcasting System

  EPSS 70%
• High 8.6
  CVE-2023-46727 GLPI SQL injection through inventory agent request

  GLPI · glpi

  EPSS 68%
• Medium 5.3
  CVE-2023-50720 XWiki Platform Solr search discloses email addresses of users

  xwiki · xwiki-platform

  EPSS 59%
• High 8.6
  CVE-2023-50269 SQUID-2023:10 Denial of Service in HTTP Request parsing

  squid-cache · squid

  EPSS 58%
• Unscored
  CVE-2023-31546 Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.
  EPSS 49%