按 Enter 到主內容區
:::

TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報

:::

9/16至9/22 Known Exploited Vulnerabilities Catalog(KEV)週報

發布日期：
字型大小：
  • 發布單位:TWCERT/CC
  • 更新日期:2024-10-04
  • 點閱次數:665
  • 內容說明：

CISA於9/16至9/22在Known Exploited Vulnerabilities Catalog(KEV)中發布11個已遭駭客利用之漏洞。

 

  • 影響平台：


受影響廠商與產品名稱如下：
Adobe｜Flash Player
Apache｜HugeGraph-Server
Ivanti｜Cloud Services Appliance (CSA)
Microsoft｜SQL Server
Microsoft｜Windows
Oracle｜ADF Faces
Oracle｜WebLogic Server
Progress｜WhatsUp Gold

 

  • 處置建議：

修補說明請參考以下官方連結：
Adobe｜Flash Player
https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq
Apache｜HugeGraph-Server
https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9
Ivanti｜Cloud Services Appliance (CSA)
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963
Microsoft｜SQL Server
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0618
Microsoft｜Windows
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461
Oracle｜ADF Faces
https://www.oracle.com/security-alerts/cpuapr2022.html
Oracle｜WebLogic Server
https://www.oracle.com/security-alerts/cpujul2020.html
Progress｜WhatsUp Gold
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024

 

  • CVE編號：

CVE-2013-0643
CVE-2013-0648
CVE-2014-0497
CVE-2014-0502
CVE-2020-0618
CVE-2020-14644
CVE-2022-21445
CVE-2024-27348
CVE-2024-6670
CVE-2024-8963
CVE-2024-43461

相關連結

  1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  2. https://nvd.nist.gov/vuln/detail/CVE-2013-0643
  3. https://nvd.nist.gov/vuln/detail/CVE-2013-0648
  4. https://nvd.nist.gov/vuln/detail/CVE-2014-0497
  5. https://nvd.nist.gov/vuln/detail/CVE-2014-0502
  6. https://nvd.nist.gov/vuln/detail/CVE-2020-0618
  7. https://nvd.nist.gov/vuln/detail/CVE-2020-14644
  8. https://nvd.nist.gov/vuln/detail/CVE-2022-21445
  9. https://nvd.nist.gov/vuln/detail/CVE-2024-27348
  10. https://nvd.nist.gov/vuln/detail/CVE-2024-6670
  11. https://nvd.nist.gov/vuln/detail/CVE-2024-8963
  12. https://nvd.nist.gov/vuln/detail/CVE-2024-43461
  13. https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq
  14. https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9
  15. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-20
  16. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0618
  17. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461
  18. https://www.oracle.com/security-alerts/cpuapr2022.html
  19. https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024
回頁首