• 發布單位:TWCERT/CC
• 更新日期:2024-12-02
• 點閱次數:730

• 內容說明：

CISA於11/18至11/24在Known Exploited Vulnerabilities Catalog(KEV)中發布7個已遭駭客利用之漏洞。

• 影響平台：

Oracle｜Agile Product Lifecycle Management (PLM)
Apple｜Multiple Products
VMware｜vCenter Server
Palo Alto Networks｜PAN-OS

• 處置建議：

Oracle｜Agile Product Lifecycle Management (PLM)
https://www.oracle.com/security-alerts/alert-cve-2024-21287.html
Apple｜Multiple Products
https://support.apple.com/en-us/121752
https://support.apple.com/en-us/121753
https://support.apple.com/en-us/121754
https://support.apple.com/en-us/121755
https://support.apple.com/en-us/121756
VMware｜vCenter Server
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968
Palo Alto Networks｜PAN-OS
https://security.paloaltonetworks.com/CVE-2024-9474
https://security.paloaltonetworks.com/CVE-2024-0012

• CVE編號：

CVE-2024-0012
CVE-2024-9474
CVE-2024-21287
CVE-2024-38812
CVE-2024-38813
CVE-2024-44308
CVE-2024-44309