CVE Vulnerability Advisory Database

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authenticated attacker with high privileges (Site Owner/Administrator) can execute arbitrary code in the context of the server, leading to complete system compromise

[Mitigation] Apply the official Microsoft security patches immediately and restrict access to the SharePoint administration interface from untrusted networks

[Affected Scope] Zyxel ZyWALL/USG (4.60 to 4.73), VPN (4.60 to 5.35), USG FLEX (4.60 to 5.35), and ATP (4.60 to 5.35) series firmware

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending crafted IKE UDP packets to the affected device

[Mitigation] Immediately upgrade to the latest official patched firmware version and restrict access to IKE ports (UDP 500/4500) from untrusted WAN interfaces

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.121

[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.121 or higher)

[Affected Scope] All on-premises and cloud web application servers running Novi Survey versions prior to 8.9.43676.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and malicious code under the security context of the web service account.

[Mitigation] Immediately upgrade to the official patched version (8.9.43676 or higher) and restrict external access to the application.

[Affected Scope] Systems running Safari prior to 16.4.1, iOS/iPadOS prior to 15.7.5 and 16.4.1, and macOS Ventura prior to 13.3.1

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution due to a Use-After-Free memory corruption issue, which has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates and OS patches provided by Apple

[Affected Scope] Sophos Web Appliance versions prior to 4.3.10.4

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending specially crafted HTTP requests.

[Mitigation] Immediately upgrade Sophos Web Appliance to version 4.3.10.4 or higher, or migrate to a supported alternative solution due to the product's End-of-Life (EOL) status.

[Affected Scope] Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x

[Impact] Unauthenticated attackers can bypass security restrictions to gain administrative access and chain it with Server-Side Template Injection (SSTI) to execute arbitrary code

[Mitigation] Immediately upgrade to patched versions (9.4.0.1, 9.3.0.2 or later) and restrict external access to the Pentaho management interface

[Affected Scope] Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x

[Impact] Remote attackers can inject malicious Spring templates via specific web services, leading to Server-Side Template Injection (SSTI) and arbitrary code execution.

[Mitigation] Immediately upgrade affected Pentaho instances to patched versions (9.4.0.1, 9.3.0.2 or higher) and restrict external access.

[Affected Scope] Cobalt Strike version 4.7.1

[Impact] Remote attackers can execute arbitrary code within the Cobalt Strike UI context by injecting crafted HTML payloads

[Mitigation] Immediately upgrade to Cobalt Strike version 4.7.2 or later, and restrict access to the Teamserver

[Affected Scope] Adobe ColdFusion 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier)

[Impact] Unauthenticated remote attackers can execute arbitrary code or access sensitive files in the context of the current user without any user interaction

[Mitigation] Immediately apply official vendor patches (ColdFusion 2018 Update 16, ColdFusion 2021 Update 6 or later) and restrict external access

[Affected Scope] Adobe ColdFusion 2018 Update 15 (and earlier) and ColdFusion 2021 Update 5 (and earlier).

[Impact] Successful exploitation allows unauthenticated remote attackers to execute arbitrary code in the context of the current user without any user interaction.

[Mitigation] Immediately apply the official Adobe security patches to upgrade to ColdFusion 2018 Update 16, ColdFusion 2021 Update 6, or later.

[Affected Scope] TP-Link Archer AX21 (AX1800) firmware versions prior to 1.1.4 Build 20230219

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a specially crafted HTTP POST request

[Mitigation] Immediately upgrade to firmware version 1.1.4 Build 20230219 or later, and disable remote WAN management

[Affected Scope] Apple devices running iOS versions prior to 16.3.1, iPadOS versions prior to 16.3.1, macOS Ventura versions prior to 13.2.1, and Safari versions prior to 16.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE). This vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

[Affected Scope] IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a specially crafted API request

[Mitigation] Immediately upgrade to IBM Aspera Faspex 4.4.2 Patch Level 2 or later, or restrict access to the obsolete API endpoints

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019

[Impact] An authenticated attacker can execute arbitrary commands with SYSTEM privileges and fully compromise the server by sending specially crafted serialized data

[Mitigation] Immediately apply the latest Cumulative Updates (CU) and Security Updates (SU) provided by Microsoft

[Affected Scope] Ruckus Wireless Admin and AP controller devices running version 10.4 or lower

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP GET request

[Mitigation] Immediately apply the official vendor firmware patches and restrict access to the management interface from the public internet

[Affected Scope] Fortra (formerly HelpSystems) GoAnywhere MFT versions prior to 7.1.2

[Impact] An unauthenticated remote attacker can execute arbitrary system commands on the target server by sending a malicious serialized object to the License Response Servlet.

[Mitigation] Immediately upgrade GoAnywhere MFT to version 7.1.2 or higher, and restrict external access to the administrator console port (9006).

[Affected Scope] Zoho ManageEngine on-premise products with SAML SSO configured or previously enabled (e.g., ServiceDesk Plus through 14003, ADSelfService Plus through 6210, Endpoint Central through 10.1.2228.10)

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending a specially crafted SAML response containing malicious XSLT payloads

[Mitigation] Immediately upgrade the affected ManageEngine products to the latest patched versions, or temporarily disable SAML SSO and restrict access to SAML endpoints

[Affected Scope] Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can compromise the server via T3/IIOP protocols, leading to unauthorized access to sensitive data or potential Remote Code Execution (RCE)

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external access to T3/IIOP protocols (typically port 7001)

[Affected Scope] SugarCRM versions prior to 12.0 without Hotfix 91155

[Impact] Authenticated attackers can inject arbitrary PHP code through crafted requests in the EmailTemplates module, leading to full remote code execution

[Mitigation] Apply SugarCRM Hotfix 91155 immediately or upgrade to version 12.0 or later