Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2015-2291 — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).
|
Intel | Ethernet Diagnostics Driver for Windows | Feb 10, 2023 | Mar 3, 2023 | Ransomware |
|
CVE-2022-24990 — TerraMaster OS Remote Command Execution Vulnerability
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.
|
TerraMaster | TerraMaster OS | Feb 10, 2023 | Mar 3, 2023 | Ransomware |
|
CVE-2023-0669 — Fortra GoAnywhere MFT Remote Code Execution Vulnerability
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.
|
Fortra | GoAnywhere MFT | Feb 10, 2023 | Mar 3, 2023 | Ransomware |
|
CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.
|
Oracle | E-Business Suite | Feb 2, 2023 | Feb 23, 2023 | Ransomware |
|
CVE-2023-22952 — Multiple SugarCRM Products Remote Code Execution Vulnerability
Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.
|
SugarCRM | Multiple Products | Feb 2, 2023 | Feb 23, 2023 | |
|
CVE-2017-11357 — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
|
Telerik | User Interface (UI) for ASP.NET AJAX | Jan 26, 2023 | Feb 16, 2023 | Ransomware |
|
CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
|
Zoho | ManageEngine | Jan 23, 2023 | Feb 13, 2023 | Ransomware |
|
CVE-2022-44877 — CWP Control Web Panel OS Command Injection Vulnerability
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.
|
CWP | Control Web Panel | Jan 17, 2023 | Feb 7, 2023 | |
|
CVE-2022-41080 — Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.
|
Microsoft | Exchange Server | Jan 10, 2023 | Jan 31, 2023 | Ransomware |
|
CVE-2023-21674 — Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Windows | Jan 10, 2023 | Jan 31, 2023 |
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).
Ethernet Diagnostics Driver for Windows · Feb 10, 2023
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.
TerraMaster OS · Feb 10, 2023
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.
GoAnywhere MFT · Feb 10, 2023
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.
E-Business Suite · Feb 2, 2023
Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.
Multiple Products · Feb 2, 2023
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
User Interface (UI) for ASP.NET AJAX · Jan 26, 2023
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
ManageEngine · Jan 23, 2023
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.
Control Web Panel · Jan 17, 2023
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.
Exchange Server · Jan 10, 2023
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
Windows · Jan 10, 2023