3/31至4/6 Known Exploited Vulnerabilities Catalog(KEV)週報
- 發布單位:TWCERT/CC
- 更新日期:2025-04-09
- 點閱次數:416
- 內容說明：
CISA於3/31至4/6在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。
- 影響平台：
Ivanti｜Connect Secure、Policy Secure及ZTA Gateways
Apache｜Tomcat
Cisco｜Smart Licensing Utility
- 處置建議：
修補說明請參考以下官方連結：
Ivanti｜Connect Secure, Policy Secure and ZTA Gateways
https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-22457
Apache｜Tomcat
https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq
Cisco｜Smart Licensing Utility
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw
- CVE編號：
CVE-2024-20439
CVE-2025-22457
CVE-2025-24813