CVE Vulnerability Advisory Database

[Affected Scope] Confluence Server and Data Center environments with Questions for Confluence app versions 2.7.34, 2.7.35, and 3.0.2 installed

[Impact] A remote, unauthenticated attacker can exploit the hardcoded 'disabledsystemuser' account to log into Confluence and access all sensitive content

[Mitigation] Immediately upgrade the Questions for Confluence app to a non-vulnerable version or disable/delete the 'disabledsystemuser' account

[Affected Scope] Zoho ManageEngine Password Manager Pro before 12101, PAM360 before 5510, and Access Manager Plus before 4303

[Impact] Unauthenticated (or authenticated for Access Manager Plus) attackers can execute arbitrary code with system privileges by sending malicious XML-RPC requests

[Mitigation] Immediately upgrade to the patched versions (Password Manager Pro 12101, PAM360 5510, Access Manager Plus 4303 or higher)

[Affected Scope] Apache Spark versions 3.0.3 and earlier, 3.1.1 to 3.1.2, and 3.2.0 to 3.2.1

[Impact] Remote attackers can execute arbitrary OS shell commands with the privileges of the Spark process via crafted HTTP requests

[Mitigation] Immediately upgrade Apache Spark to versions 3.1.3, 3.2.2, 3.3.0 or later, or disable the spark.acls.enable configuration

[Affected Scope] dotCMS versions 3.0 through 22.02

[Impact] Unauthenticated attackers can upload malicious JSP files via directory traversal when anonymous content creation is enabled, leading to full Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to patched dotCMS versions (22.03 or higher) and disable anonymous content creation APIs if not required

[Affected Scope] Atlassian Confluence Server and Data Center versions from 1.3.0 before 7.4.17, and specific release lines up to 7.18.1

[Impact] An unauthenticated remote attacker can execute arbitrary Java code on the Confluence instance with system privileges, leading to full host compromise.

[Mitigation] Immediately upgrade Confluence to the patched versions (7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.1 or higher) or apply the vendor-provided workaround JAR files.

[Affected Scope] Contec SolarView Compact version 6.00 and prior.

[Impact] Unauthenticated attackers can execute arbitrary OS commands via the web interface, leading to complete system compromise.

[Mitigation] Apply the latest firmware updates immediately and restrict external internet access to the management interface.

[Affected Scope] Apache CouchDB installations prior to version 3.2.2

[Impact] Unauthenticated attackers can bypass authentication, gain administrative privileges, and execute arbitrary code via Erlang distribution ports

[Mitigation] Upgrade Apache CouchDB to version 3.2.2 or higher, and restrict access to Erlang ports (4369, 9100-9200) using a firewall

[Affected Scope] Zimbra Collaboration Suite (ZCS) 9.0.0 versions prior to Patch 24

[Impact] Unauthenticated attackers can execute arbitrary web scripts or HTML in the victim's browser session, potentially hijacking active sessions and accessing sensitive mailboxes

[Mitigation] Immediately upgrade to Zimbra 9.0.0 Patch 24 or later, and apply temporary WAF rules to block access to the vulnerable endpoint

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] An authenticated administrator can upload a malicious ZIP archive to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or later)

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0.

[Impact] Unauthenticated remote attackers can inject arbitrary Memcached commands, leading to cache poisoning, session hijacking, and credential theft.

[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or higher).

[Affected Scope] Oracle Fusion Middleware - Oracle Application Development Framework (ADF) versions 12.2.1.3.0 and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and completely compromise the host system via HTTP network access

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately or restrict external access to vulnerable ADF endpoints

[Affected Scope] WSO2 API Manager (2.2.0 to 4.0.0), Identity Server (5.2.0 to 5.11.0), Enterprise Integrator (6.2.0 to 6.6.0), and other major WSO2 products

[Impact] Unauthenticated attackers can upload and execute arbitrary JSP files via a crafted HTTP request, leading to complete system compromise

[Mitigation] Apply official WSO2 security patches immediately, restrict external access to the '/fileupload' endpoint, and disable execution permissions in web root subdirectories

[Affected Scope] Zoho ManageEngine ADSelfService Plus versions prior to build 6122

[Impact] A remote authenticated administrator or partially authenticated attacker can execute arbitrary OS commands with SYSTEM privileges by exploiting the policy custom script feature and unsanitized input fields

[Mitigation] Immediately upgrade ADSelfService Plus to build 6122 or later, change default administrator credentials, and restrict external access

[Affected Scope] Java applications utilizing JAI-EXT library versions prior to 1.2.22, including downstream GeoServer deployments.

[Impact] Unauthenticated remote attackers can execute arbitrary Java code on the target server by injecting malicious Jiffle scripts, leading to complete system compromise.

[Mitigation] Immediately upgrade JAI-EXT to version 1.2.22 or higher, or temporarily remove the Janino compiler JAR file from the classpath.

[Affected Scope] Specific versions of VMware Workspace ONE Access and Identity Manager

[Impact] Unauthenticated remote attackers with network access can execute arbitrary system commands on the target server, posing a critical risk (CVSS 9.8)

[Mitigation] Immediately apply the official security patches (VMSA-2022-0011) or implement temporary workarounds to restrict external access

[Affected Scope] Trend Micro Apex Central On-Premise deployments (SaaS deployments are unaffected)

[Impact] Unauthenticated remote attackers can upload malicious web shells to execute arbitrary commands with system privileges, leading to complete infrastructure compromise

[Mitigation] Immediately apply the official hotfixes/patches provided by Trend Micro and restrict external access to the management console

[Affected Scope] Spring Cloud Gateway versions prior to 3.1.1 and 3.0.7, where the Gateway Actuator endpoint is enabled, exposed, and unsecured

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the host by sending maliciously crafted HTTP requests

[Mitigation] Immediately upgrade Spring Cloud Gateway to version 3.1.1, 3.0.7, or higher, and disable or secure the Gateway Actuator endpoint

[Affected Scope] Adobe Commerce and Magento Open Source versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier)

[Impact] Unauthenticated attackers can exploit improper input validation during the checkout process to execute arbitrary code (RCE) without user interaction, potentially leading to full system compromise

[Mitigation] Immediately apply the official Adobe security patches (APSB22-12) and update Web Application Firewall (WAF) rules

[Affected Scope] Apache APISIX versions 1.3 through 2.12.1 (including LTS versions prior to 2.10.4)

[Impact] Remote attackers can bypass IP restrictions on the Admin API and execute arbitrary code on the target server by exploiting default configurations

[Mitigation] Immediately upgrade Apache APISIX to version 2.12.1, 2.10.4 LTS, or later, and rotate default Admin Keys

[Affected Scope] SAP NetWeaver AS ABAP, AS Java, ABAP Platform, SAP Content Server 7.53, and SAP Web Dispatcher

[Impact] Unauthenticated attackers can prepend arbitrary data to a victim's request, enabling session hijacking, cache poisoning, and complete compromise of system Confidentiality, Integrity, and Availability

[Mitigation] Immediately apply the official SAP security patches (SAP Note 3123396) and restrict anomalous HTTP request headers at the reverse proxy or WAF level