Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2010-0840 — Oracle JRE Unspecified Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2010-1428 — Red Hat JBoss Information Disclosure Vulnerability
Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.
|
Red Hat | JBoss | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2012-1710 — Oracle Fusion Middleware Unspecified Vulnerability
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.
|
Oracle | Fusion Middleware | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-0074 — Microsoft Silverlight Double Dereference Vulnerability
Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
|
Microsoft | Silverlight | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-2423 — Oracle JRE Unspecified Vulnerability
Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2013-3896 — Microsoft Silverlight Information Disclosure Vulnerability
Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.
|
Microsoft | Silverlight | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2013-3993 — IBM InfoSphere BigInsights Invalid Input Vulnerability
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
|
IBM | InfoSphere BigInsights | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-7331 — Microsoft Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.
|
Microsoft | Internet Explorer | May 25, 2022 | Jun 15, 2022 |
Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.
Java Runtime Environment (JRE) · May 25, 2022
Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.
JBoss · May 25, 2022
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.
Fusion Middleware · May 25, 2022
Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
Silverlight · May 25, 2022
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
Java Runtime Environment (JRE) · May 25, 2022
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
Java Runtime Environment (JRE) · May 25, 2022
Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
Java Runtime Environment (JRE) · May 25, 2022
Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.
Silverlight · May 25, 2022
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
InfoSphere BigInsights · May 25, 2022
An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.
Internet Explorer · May 25, 2022