CVE Vulnerability Advisory Database

[Affected Scope] Zimbra Collaboration Suite (ZCS) 8.8.x versions prior to 8.8.15 Patch 30 (Update 1)

[Impact] Attackers can execute arbitrary JavaScript in the victim's browser session, leading to session hijacking and unauthorized mailbox access

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to 8.8.15 Patch 30 (Update 1) or later

[Affected Scope] Oracle Access Manager within Oracle Fusion Middleware, versions 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can gain full control of the Oracle Access Manager system and execute arbitrary code via HTTP network access

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external access to OpenSSO Agent endpoints

[Affected Scope] Zabbix Frontend versions 5.4.0 to 5.4.8, and 6.0.0-alpha1 to 6.0.0-beta1

[Impact] Unauthenticated remote attackers can bypass step verification in setup.php to access configuration stages and potentially alter the Zabbix Frontend database connection settings

[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (5.4.9, 6.0.0-beta2 or later) and restrict external access to the setup.php file via web server configuration

[Affected Scope] Zabbix Frontend versions 4.0.36, 5.0.18, 5.4.8, 6.0.0-alpha7 and below with SAML SSO enabled

[Impact] Unauthenticated remote attackers can modify session data to bypass authentication, escalating privileges to gain full administrative access

[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (4.0.37, 5.0.19, 5.4.9, 6.0.0-beta1 or later) or disable SAML authentication

[Affected Scope] SolarWinds Serv-U versions prior to 15.3 utilizing LDAP authentication

[Impact] Attackers can input unsanitized characters to manipulate LDAP queries, potentially leading to authentication bypass attempts or directory harvesting, with active exploitation confirmed via CISA KEV

[Mitigation] Immediately upgrade SolarWinds Serv-U to version 15.3 or later, and apply WAF rules to filter out LDAP special characters from login inputs

[Affected Scope] Acclaim Systems USAHERDS through version 7.4.0.1

[Impact] Attackers can exploit hard-coded credentials to bypass authentication and achieve remote code execution (RCE)

[Mitigation] Immediately upgrade to the patched version and restrict external network access to the application

[Affected Scope] VMware Workspace ONE UEM console versions 20.0.8 (prior to 20.0.8.37), 20.11.0 (prior to 20.11.0.40), 21.2.0 (prior to 21.2.0.27), and 21.5.0 (prior to 21.5.0.37).

[Impact] An unauthenticated remote attacker with network access to the UEM console can send crafted requests to access sensitive internal resources and information.

[Mitigation] Apply the official cumulative patches immediately or implement IIS URL Rewrite rules to block external access to the vulnerable endpoints.

[Affected Scope] GitLab CE/EE versions 10.5 before 14.3.6, 14.4 before 14.4.4, and 14.5 before 14.5.2

[Impact] Unauthorized external attackers can perform Server-Side Request Forgery (SSRF) via the CI Lint API to access internal network resources and extract sensitive data

[Mitigation] Immediately upgrade GitLab instances to patched versions (14.3.6, 14.4.4, 14.5.2 or later) and restrict external access to the CI Lint API

[Affected Scope] Zoho ManageEngine Desktop Central and Desktop Central MSP (Enterprise/MSP builds 10.1.2127.17 and earlier, and 10.1.2128.0 through 10.1.2137.2)

[Impact] Unauthenticated remote attackers can bypass authentication filters to execute arbitrary code with SYSTEM privileges on the server, actively exploited in the wild

[Mitigation] Immediately upgrade to the patched versions (10.1.2127.18 or 10.1.2137.3 or later) depending on your current build branch

[Affected Scope] On-premise Grafana installations running versions 8.0.0-beta1 through 8.3.0 (excluding Grafana Cloud)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read sensitive local system and configuration files

[Mitigation] Immediately upgrade to patched versions (8.0.7, 8.1.8, 8.2.7, or 8.3.1+) or block the vulnerable URL path via reverse proxy

[Affected Scope] Roundcube versions before 1.3.17 and 1.4.x versions before 1.4.12

[Impact] Unauthenticated attackers can manipulate search parameters to extract sensitive database information or potentially achieve remote code execution (RCE)

[Mitigation] Immediately upgrade Roundcube to the latest stable releases (1.3.17, 1.4.12, or higher)

[Affected Scope] Metabase versions prior to 0.40.5 and 1.40.5 (including all 0.40.x and 1.40.x releases below these versions)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files and environment variables from the server

[Mitigation] Immediately upgrade to patched Metabase versions (0.40.5, 1.40.5 or later) or block the vulnerable API path using a reverse proxy or WAF

[Affected Scope] Sitecore Experience Platform (XP) 7.5 Initial Release to Sitecore XP 8.2 Update-7.

[Impact] Unauthenticated remote attackers can execute arbitrary commands with system privileges on the hosting server by sending specially crafted serialized payloads.

[Mitigation] Apply official security patches immediately or restrict external access to the vulnerable '/sitecore/shell/ClientBin/Reporting/ReportService.asmx' endpoint.

[Affected Scope] Grafana versions prior to 8.1.6 and 7.5.11

[Impact] Unauthenticated attackers can view or delete the snapshot with the lowest database key via specific API paths, potentially leading to complete snapshot data harvesting and loss.

[Mitigation] Immediately upgrade Grafana to patched versions (8.1.6, 7.5.11, or higher) or block access to the vulnerable API paths using a reverse proxy.

[Affected Scope] Citrix ShareFile Storage Zones Controller versions prior to 5.11.20

[Impact] Unauthenticated remote attackers can bypass access controls to compromise the storage zones controller, potentially leading to arbitrary code execution and data exfiltration

[Mitigation] Immediately upgrade to Citrix ShareFile Storage Zones Controller 5.11.20 or later, and restrict external access to administrative endpoints

[Affected Scope] SAP NetWeaver (Visual Composer 7.0 RT) versions 7.30, 7.31, 7.40, and 7.50

[Impact] An authenticated non-administrative attacker can upload malicious files and execute arbitrary OS commands with the privileges of the Java Server process, leading to full system compromise or denial of service

[Mitigation] Immediately apply the official patch specified in SAP Security Note 3084487 and restrict access to vulnerable upload endpoints

[Affected Scope] October CMS versions prior to Build 472 and v1.1.5 (affecting the october/system package)

[Impact] An attacker can bypass authentication and gain full access to any user account, including administrators, by sending a specially crafted password reset request.

[Mitigation] Immediately upgrade October CMS to Build 472, v1.1.5, or a newer version.

[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.

[Affected Scope] Atlassian Jira Server and Data Center versions before 8.5.14, 8.6.0 before 8.13.6, and 8.14.0 before 8.16.1

[Impact] Unauthenticated remote attackers can exploit a path traversal vulnerability to read sensitive configuration files, such as '/WEB-INF/web.xml'

[Mitigation] Immediately upgrade Jira instances to the patched versions (8.5.14, 8.13.6, 8.16.1, or later) and apply WAF access control rules

[Affected Scope] Atlassian Confluence Server and Data Center versions prior to 7.4.10, and versions from 7.5.0 prior to 7.12.3

[Impact] Unauthenticated remote attackers can bypass authorization checks via the '/s/' endpoint to view restricted resources and sensitive internal files

[Mitigation] Immediately upgrade affected instances to official patched versions (7.4.10, 7.12.3, or later), or restrict suspicious requests to the '/s/' endpoint using a WAF or reverse proxy