Emergent Threat Response

CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported

CVE-2022-27510: Critical Citrix ADC and Gateway Remote Authentication Bypass Vulnerabilities

Rapid7’s Impact from OpenSSL Buffer Overflow Vulnerabilities (CVE-2022-3786 & CVE-2022-3602)

Rapid7’s Impact from Apache Commons Text Vulnerability (CVE-2022-42889)

CVE-2022-3786 and CVE-2022-3602: Two High-Severity Buffer Overflow Vulnerabilities in OpenSSL Fixed

CVE-2021-39144: VMware Cloud Foundation Unauthenticated Remote Code Execution

CVE-2022-42889: Keep Calm and Stop Saying "Text4Shell"

CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies

Exploitation of Unpatched Zero-Day Remote Code Execution Vulnerability in Zimbra Collaboration Suite (CVE-2022-41352)

CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server

CVE-2022-36804: Easily Exploitable Vulnerability in Atlassian Bitbucket Server and Data Center

Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite

Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26138

Exploitation of Mitel MiVoice Connect SA CVE-2022-29499

CVE-2022-27511: Citrix ADM Remote Device Takeover

Active Exploitation of Confluence CVE-2022-26134

CVE-2022-30190: "Follina" Microsoft Support Diagnostic Tool Vulnerability

CVE-2022-22972: Critical Authentication Bypass in VMware Workspace ONE Access, Identity Manager, and vRealize Automation

CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

Active Exploitation of F5 BIG-IP iControl REST CVE-2022-1388

Widespread Exploitation of VMware Workspace ONE Access CVE-2022-22954