Week 11, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.3
  CVE-2023-48788 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7…

  Fortinet · FortiClientEMS

  EPSS 98%
• Critical 9.8
  CVE-2024-1071 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL In…

  Ultimate Member · Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

  EPSS 89%
• Critical 9.1
  CVE-2023-49785 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

  ChatGPTNextWeb · NextChat

  EPSS 83%
• Critical 9.8
  CVE-2024-28255 Authentication Bypass in OpenMetadata

  open-metadata · OpenMetadata

  EPSS 73%
• Critical 9.8
  CVE-2024-25153 Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

  Fortra · FileCatalyst

  EPSS 42%
• Critical 9.8
  CVE-2024-21334 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Microsoft · Open Management Infrastructure · System Center Operations Manager (SCOM) 2022 · System Center Operations Manager (SCOM) 2019

  EPSS 20%
• Critical 9.4
  CVE-2024-28253 SpEL Injection in `PUT /api/v1/policies` in OpenMetadata

  open-metadata · OpenMetadata

  EPSS 13%
• Critical 9.9
  CVE-2023-6825 File Manager And File Manager Pro (Multiple Versions) - Directory Traversal

  mndpsingh287 · File Manager · File Manager Pro · File Manager

  EPSS 6%
• Critical 9.8
  CVE-2024-0799 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection

  Arcserve · Unified Data Protection

  EPSS 4.3%
• Critical 9.3
  CVE-2023-42789 A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6…

  Fortinet · FortiOS · FortiProxy · FortiSASE

  EPSS 3.3%
• Critical 9.3
  CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding

  Apache Software Foundation · Apache CXF

  EPSS 3.1%
• Critical 9.1
  CVE-2024-26503 Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafte…
  EPSS 3%
• Critical 10.0
  CVE-2024-28354 There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post reque…
  EPSS 2.2%
• Critical 9.0
  CVE-2024-21400 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

  Microsoft · Azure Kubernetes Service

  EPSS 2.2%
• Critical 9.8
  CVE-2024-1301 Multiple Vulnerabilities in Badger Meter's Monitool

  Badger Meter · Monitool

  EPSS 2.2%

All 53 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2024-1222 Incorrect authorization controls in PaperCut NG/MF APIs

  PaperCut · PaperCut NG, PaperCut MF

  EPSS 64%
• High 7.2
  CVE-2024-2194 WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting

  VeronaLabs · WP Statistics – Simple, privacy-friendly Google Analytics alternative

  EPSS 63%
• Medium 6.3
  CVE-2024-1883 Reflected XSS in PaperCut NG/MF

  PaperCut · PaperCut NG, PaperCut MF

  EPSS 61%
• High 8.4
  CVE-2024-27317 Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification

  Apache Software Foundation · Apache Pulsar

  EPSS 57%
• Medium 5.3
  CVE-2024-1380 Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export

  comesio · Relevanssi · Relevanssi – A Better Search · Relevanssi Premium

  EPSS 50%
• High 8.8
  CVE-2024-28254 SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata

  open-metadata · OpenMetadata

  EPSS 46%
• High 7.5
  CVE-2024-0801 Unauthenticated DoS in Arcserve Unified Data Protection

  Arcserve · Unified Data Protection

  EPSS 42%
• Medium 6.5
  CVE-2024-1884 Server Side Request Forgery in PaperCut NG/MF

  PaperCut · PaperCut NG, PaperCut MF

  EPSS 38%