CVE Vulnerability Advisory Database

[Affected Scope] Apache CouchDB installations prior to version 3.2.2

[Impact] Unauthenticated attackers can bypass authentication, gain administrative privileges, and execute arbitrary code via Erlang distribution ports

[Mitigation] Upgrade Apache CouchDB to version 3.2.2 or higher, and restrict access to Erlang ports (4369, 9100-9200) using a firewall

[Affected Scope] Mitel MiVoice Connect through 19.2 SP3 Service Appliances (SA 100, SA 400, and Virtual SA).

[Impact] Unauthenticated remote attackers can exploit incorrect data validation to execute arbitrary code and gain full control over the affected appliance.

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces from the public internet.

[Affected Scope] Zimbra Collaboration Suite (ZCS) 9.0.0 versions prior to Patch 24

[Impact] Unauthenticated attackers can execute arbitrary web scripts or HTML in the victim's browser session, potentially hijacking active sessions and accessing sensitive mailboxes

[Mitigation] Immediately upgrade to Zimbra 9.0.0 Patch 24 or later, and apply temporary WAF rules to block access to the vulnerable endpoint

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] An authenticated administrator can upload a malicious ZIP archive to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or later)

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0.

[Impact] Unauthenticated remote attackers can inject arbitrary Memcached commands, leading to cache poisoning, session hijacking, and credential theft.

[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or higher).

[Affected Scope] Oracle Fusion Middleware - Oracle Application Development Framework (ADF) versions 12.2.1.3.0 and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and completely compromise the host system via HTTP network access

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately or restrict external access to vulnerable ADF endpoints

[Affected Scope] WSO2 API Manager (2.2.0 to 4.0.0), Identity Server (5.2.0 to 5.11.0), Enterprise Integrator (6.2.0 to 6.6.0), and other major WSO2 products

[Impact] Unauthenticated attackers can upload and execute arbitrary JSP files via a crafted HTTP request, leading to complete system compromise

[Mitigation] Apply official WSO2 security patches immediately, restrict external access to the '/fileupload' endpoint, and disable execution permissions in web root subdirectories

[Affected Scope] Zoho ManageEngine ADSelfService Plus versions prior to build 6122

[Impact] A remote authenticated administrator or partially authenticated attacker can execute arbitrary OS commands with SYSTEM privileges by exploiting the policy custom script feature and unsanitized input fields

[Mitigation] Immediately upgrade ADSelfService Plus to build 6122 or later, change default administrator credentials, and restrict external access

[Affected Scope] Most Windows operating system versions, including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] A locally authenticated attacker can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict multi-user interactive logins on unpatched systems

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server 2008 through 2022.

[Impact] Local authenticated attackers can execute arbitrary code with kernel-level privileges (SYSTEM), leading to complete system compromise.

[Mitigation] Immediately apply the Microsoft official cumulative security updates and monitor for anomalous CLFS log creation and driver activities.

[Affected Scope] Java applications utilizing JAI-EXT library versions prior to 1.2.22, including downstream GeoServer deployments.

[Impact] Unauthenticated remote attackers can execute arbitrary Java code on the target server by injecting malicious Jiffle scripts, leading to complete system compromise.

[Mitigation] Immediately upgrade JAI-EXT to version 1.2.22 or higher, or temporarily remove the Janino compiler JAR file from the classpath.

[Affected Scope] VMware Workspace ONE Access, Identity Manager (vIDM), and vRealize Automation (vRA).

[Impact] A local attacker with low-privilege access can exploit improper permissions in support scripts to escalate privileges to root, leading to full system compromise.

[Mitigation] Apply official security patches immediately in accordance with VMware Advisory VMSA-2022-0011.

[Affected Scope] Specific versions of VMware Workspace ONE Access and Identity Manager

[Impact] Unauthenticated remote attackers with network access can execute arbitrary system commands on the target server, posing a critical risk (CVSS 9.8)

[Mitigation] Immediately apply the official security patches (VMSA-2022-0011) or implement temporary workarounds to restrict external access

[Affected Scope] Google Chrome users on desktop platforms prior to version 98.0.4758.102

[Impact] A remote attacker can exploit heap corruption and potentially execute arbitrary code by enticing a user to visit a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (98.0.4758.102 or higher)

[Affected Scope] Spring MVC or Spring WebFlux applications running on JDK 9+ and deployed as a WAR on Apache Tomcat.

[Impact] Unauthenticated remote attackers can manipulate HTTP request parameters to modify Tomcat logging configurations and upload a web shell, leading to complete system compromise.

[Mitigation] Immediately upgrade Spring Framework to secure versions (5.3.18+, 5.2.20+) or update the corresponding Spring Boot parent version.

[Affected Scope] Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions

[Impact] Unauthenticated remote attackers can inject malicious SpEL expressions via HTTP headers to execute arbitrary system commands and access local resources.

[Mitigation] Immediately upgrade Spring Cloud Function to version 3.1.7, 3.2.3, or higher, and block suspicious routing headers using WAF rules.

[Affected Scope] Trend Micro Apex Central On-Premise deployments (SaaS deployments are unaffected)

[Impact] Unauthenticated remote attackers can upload malicious web shells to execute arbitrary commands with system privileges, leading to complete infrastructure compromise

[Mitigation] Immediately apply the official hotfixes/patches provided by Trend Micro and restrict external access to the management console

[Affected Scope] Unpatched VMware vCenter Server versions 6.5, 6.7, and 7.0

[Impact] A malicious actor with non-administrative or local access can read sensitive configuration files and credentials, potentially leading to full infrastructure compromise

[Mitigation] Apply official VMware security patches (VMSA-2022-0009) immediately, or restrict file permissions on sensitive configuration files as a temporary workaround

[Affected Scope] D-Link DIR-820L firmware version 1.05B03 and prior.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via crafted HTTP POST requests, leading to full device compromise.

[Mitigation] Since this device is End-of-Life (EOL), immediate replacement of the hardware is highly recommended. Alternatively, disable remote management and restrict access.

[Affected Scope] Linux kernel versions from 5.8 up to 5.17-rc8 utilizing the watch_queue event notification subsystem.

[Impact] A local unprivileged attacker can overwrite kernel state memory, potentially leading to local privilege escalation (LPE) to root or system denial of service (DoS).

[Mitigation] Apply the latest kernel security patches immediately, or restrict unprivileged user namespaces as a temporary mitigation.