CISA Known Exploited Vulnerabilities (KEV)

CVE-2013-3993 - IBM InfoSphere BigInsights Invalid Input Vulnerability -

Action Due Jun 15, 2022 Target Vendor : IBM

Description : Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

Action : The impacted product is end-of-life and should be disconnected if still in use.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2013-3993

CVE-2013-3896 - Microsoft Silverlight Information Disclosure Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Microsoft

Description : Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.

Action : The impacted product is end-of-life and should be disconnected if still in use.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2013-3896

CVE-2013-2423 - Oracle JRE Unspecified Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Oracle

Description : Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2013-2423

CVE-2013-0431 - Oracle JRE Sandbox Bypass Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Oracle

Description : Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2013-0431

CVE-2013-0422 - Oracle JRE Remote Code Execution Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Oracle

Description : A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2013-0422

CVE-2013-0074 - Microsoft Silverlight Double Dereference Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Microsoft

Description : Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

Action : The impacted product is end-of-life and should be disconnected if still in use.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2013-0074

CVE-2010-1428 - Red Hat JBoss Information Disclosure Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Red Hat

Description : Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2010-1428

CVE-2010-0840 - Oracle JRE Unspecified Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Oracle

Description : Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2010-0840

CVE-2010-0738 - Red Hat JBoss Authentication Bypass Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Red Hat

Description : The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2010-0738

CVE-2019-3010 - Oracle Solaris Privilege Escalation Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Oracle

Description : Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2019-3010

CVE-2016-3393 - Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Microsoft

Description : A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2016-3393

CVE-2015-4495 - Mozilla Firefox Security Feature Bypass Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Mozilla

Description : Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-4495

CVE-2012-1710 - Oracle Fusion Middleware Unspecified Vulnerability -

Action Due Jun 15, 2022 Target Vendor : Oracle

Description : Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2012-1710

CVE-2018-19949 - QNAP NAS File Station Command Injection Vulnerability -

Action Due Jun 14, 2022 Target Vendor : QNAP

Description : A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2018-19949

CVE-2018-19943 - QNAP NAS File Station Cross-Site Scripting Vulnerability -

Action Due Jun 14, 2022 Target Vendor : QNAP

Description : A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2018-19943

CVE-2017-0147 - Microsoft Windows SMBv1 Information Disclosure Vulnerability -

Action Due Jun 14, 2022 Target Vendor : Microsoft

Description : The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Known

Notes : https://nvd.nist.gov/vuln/detail/CVE-2017-0147

CVE-2017-0022 - Microsoft XML Core Services Information Disclosure Vulnerability -

Action Due Jun 14, 2022 Target Vendor : Microsoft

Description : Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2017-0022

CVE-2017-0005 - Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability -

Action Due Jun 14, 2022 Target Vendor : Microsoft

Description : The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2017-0005

CVE-2017-0149 - Microsoft Internet Explorer Memory Corruption Vulnerability -

Action Due Jun 14, 2022 Target Vendor : Microsoft

Description : Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2017-0149

CVE-2017-8291 - Artifex Ghostscript Type Confusion Vulnerability -

Action Due Jun 14, 2022 Target Vendor : Artifex

Description : Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.

Action : Apply updates per vendor instructions.

Known To Be Used in Ransomware Campaigns? : Unknown

Notes : https://nvd.nist.gov/vuln/detail/CVE-2017-8291