Veille CVE

Semaine du 26 septembre au 2 octobre 2022

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2022-41082 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange Server

    Microsoft Exchange Server Remote Code Execution Vulnerability — Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.

  2. CVE-2022-41040 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange Server

    Microsoft Exchange Server Server-Side Request Forgery Vulnerability — Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.

  3. CVE-2022-36804 – Non évaluée Exploitée

    Atlassian Bitbucket Server and Data Center

    Atlassian Bitbucket Server and Data Center Command Injection Vulnerability — Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.