CVE Vulnerability Advisory Database

[Affected Scope] SSL VPN service running on FortiOS 6.4.0, 6.2.0 to 6.2.3, and 6.0.9 and below

[Impact] Attackers can bypass the second-factor authentication (FortiToken) and gain unauthorized access to the internal network by altering the case of the username

[Mitigation] Immediately upgrade FortiOS to the patched versions (6.4.1, 6.2.4, 6.0.10 or higher) and audit SSL VPN access logs

[Affected Scope] Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can exploit T3 or IIOP protocols to achieve complete takeover and execute arbitrary code on the target server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict/block T3 and IIOP protocol access using connection filters

[Affected Scope] All Windows Server versions from 2008 through 2019 with the DNS Server role enabled.

[Impact] Successful exploitation allows unauthenticated remote attackers to execute arbitrary code with SYSTEM privileges, potentially leading to full Active Directory domain compromise.

[Mitigation] Apply the official Microsoft security updates immediately, or implement the registry-based workaround to restrict maximum DNS packet size.

[Affected Scope] Windows Server host and guest virtual machine (VM) environments with Hyper-V RemoteFX vGPU enabled

[Impact] An authenticated attacker on a guest OS can bypass VM isolation boundaries to execute arbitrary code on the host OS, leading to full host compromise

[Mitigation] Apply official Microsoft security patches immediately, or disable the deprecated and high-risk RemoteFX vGPU feature in favor of Discrete Device Assignment (DDA)

[Affected Scope] SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30, 7.31, 7.40, and 7.50

[Impact] Unauthenticated remote attackers can execute configuration tasks, create administrative accounts, and fully compromise system confidentiality, integrity, and availability

[Mitigation] Apply SAP Security Note 2934135 immediately or disable/restrict access to the CTC Web Service

[Affected Scope] Systems running unpatched versions impacted by CVE-2020-10987

[Impact] The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via t...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] MobileIron Core & Connector versions 10.6.0.0 and earlier, Sentry versions 9.8.0 and earlier, Monitor & RDB versions 2.0.0.1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system administrator privileges by sending specially crafted Hessian serialized data

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to sensitive service endpoints

[Affected Scope] Traffic Management User Interface (TMUI), also known as the Configuration utility, in F5 BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files or execute remote commands with administrative privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions provided by F5, or apply temporary workarounds to restrict external access to the TMUI management interface

[Affected Scope] DrayTek Vigor3900, Vigor2960, and Vigor300B devices running firmware versions prior to 1.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade the device firmware to version 1.5.1 or higher and disable external WAN access to the management interface

[Affected Scope] Sophos XG Firewall v17.0, v17.1, and v17.5 (v17.5 MR12 and prior) with Clientless VPN Access feature enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) or cause a Denial of Service (DoS) on the firewall via specially crafted HTTP/S requests

[Mitigation] Apply official hotfix HF062020.1, upgrade to the latest firmware, and restrict WAN access to the User Portal and SSL VPN ports

[Affected Scope] PAN-OS 8.1, 9.0, and 9.1 versions, Panorama, and GlobalProtect gateways with SAML authentication enabled and 'Validate Identity Provider Certificate' disabled

[Impact] Unauthenticated remote attackers can bypass SAML signature verification to gain administrative access to PAN-OS/Panorama web interfaces or access protected network resources

[Mitigation] Upgrade PAN-OS to patched versions (9.1.3, 9.0.9, 8.1.15 or later) or enable the 'Validate Identity Provider Certificate' option in the SAML Identity Provider Server Profile

[Affected Scope] IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, and 2.0.4.

[Impact] A remote authenticated attacker with high privileges could execute arbitrary OS commands, leading to complete system compromise.

[Mitigation] Apply the official IBM security patches immediately and restrict network access to the management interface.

[Affected Scope] IBM Data Risk Manager versions 2.0.1 through 2.0.6 configured with SAML authentication.

[Impact] A remote attacker can bypass the authentication process and gain full administrative access to the system by sending a specially crafted HTTP request.

[Mitigation] Apply the official security patches provided by IBM, or restrict access to SAML endpoints and review authentication configurations.

[Affected Scope] Roundcube Webmail versions before 1.4.4

[Impact] Unauthenticated attackers can execute arbitrary OS commands and gain full control of the mail server via shell metacharacters

[Mitigation] Immediately upgrade Roundcube Webmail to version 1.4.4 or later and restrict ImageMagick configuration paths

[Affected Scope] Juniper Networks Junos OS devices with HTTP/HTTPS services (J-Web, Web Authentication, Dynamic-VPN, etc.) enabled

[Impact] Unauthenticated attackers can read arbitrary system files, hijack active administrator session tokens, or inject commands into web logs to execute limited commands

[Mitigation] Upgrade Junos OS to the recommended patched release, or disable HTTP/HTTPS and J-Web services if they are not business-critical

[Affected Scope] SaltStack Salt versions before 2019.2.4 and 3000 before 3000.2

[Impact] Unauthenticated remote attackers can bypass authentication via the ClearFuncs class to retrieve master tokens or execute arbitrary commands on connected salt minions

[Mitigation] Immediately upgrade SaltStack to patched versions (2019.2.4, 3000.2, or higher) and restrict access to salt-master ports (4505, 4506)

[Affected Scope] Sophos XG Firewall devices running SFOS versions 17.0, 17.1, 17.5, and 18.0 before 2020-04-25, with administration (HTTPS) or User Portal exposed on the WAN zone.

[Impact] Unauthenticated remote attackers can execute arbitrary code via SQL injection, leading to the exfiltration of usernames and hashed passwords of local administrators and portal users.

[Mitigation] Immediately apply the official firmware patches and disable WAN-side access to the administration interface and User Portal.

[Affected Scope] Cisco IP Phone series running vulnerable firmware versions with the web server service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or trigger a device reload, leading to a Denial of Service (DoS) condition

[Mitigation] Apply official vendor firmware patches immediately, or disable the Web Access feature and restrict HTTP/HTTPS access via ACLs

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and take full control of the Oracle WebLogic Server by sending malicious serialized data via T3 or IIOP protocols

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict external access to T3/IIOP protocols using connection filters and firewalls

[Affected Scope] VMware vCenter Server 6.7 deployments (specifically those upgraded from prior versions) containing an embedded or external Platform Services Controller (PSC).

[Impact] A remote, unauthenticated attacker with network access to vmdir can bypass access controls to extract sensitive directory data or gain full administrative privileges.

[Mitigation] Immediately upgrade vCenter Server to version 6.7 Update 3f or later, and restrict network access to the vmdir service.