Veille CVE

Semaine du 28 février au 6 mars 2022

2 CVE sur 4

Critique 2 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2022-26318 9.8 Critique Exploitée

    Watchguard fireware

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

  2. CVE-2022-22947 10.0 Critique Exploitée

    Spring Cloud Gateway · Vmware spring cloud gateway · Oracle commerce guided search · Oracle communications cloud native core binding support function

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.