VULNERA Pulse

Microsoft — Partner Center

CVE-2024-49035 / Added: Feb. 25, 2025

CRITICAL CVSS 9.80 EPSS Score 20.16 EPSS Percentile 96.43

Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.

Headlines

• Feb. 26, 2025 - U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
• Feb. 26, 2025 - CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
• Feb. 26, 2025 - CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities
• Dec. 2, 2024 - THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25 - Dec 1)
• Nov. 29, 2024 - Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks

Back to top ↑

Synacor — Zimbra Collaboration Suite (ZCS)

CVE-2023-34192 / Added: Feb. 25, 2025

CRITICAL CVSS 9.00 EPSS Score 90.09 EPSS Percentile 99.09

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

Headlines

• Feb. 26, 2025 - U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
• Feb. 26, 2025 - CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
• Feb. 26, 2025 - CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities
• July 17, 2023 - Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192)

Back to top ↑

Adobe — ColdFusion

CVE-2017-3066 / Added: Feb. 24, 2025

CRITICAL CVSS 9.80 EPSS Score 97.07 EPSS Percentile 99.88

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.

Headlines

• Feb. 26, 2025 - Over 200 convincing GitHub repos serving up malware
• Feb. 25, 2025 - U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog
• Feb. 25, 2025 - CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM

Back to top ↑

Oracle — Agile Product Lifecycle Management (PLM)

CVE-2024-20953 / Added: Feb. 24, 2025

HIGH CVSS 8.80 EPSS Score 2.21 EPSS Percentile 89.42

Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

Headlines

• Feb. 26, 2025 - Over 200 convincing GitHub repos serving up malware
• Feb. 25, 2025 - U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog
• Feb. 25, 2025 - CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM

Back to top ↑

CVE-2025-27364

CRITICAL CVSS 10.00 EPSS Score 0.04 EPSS Percentile 18.53

Remote Code Execution

Published: Feb. 24, 2025

In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands.

Quotes

• Immediately pull down the latest version
• The vulnerability originates in the dynamic compilation functionality of the Caldera Manx and Sandcat agents (implants)
• All versions of MITRE Caldera (before commit 35bc06e and going back as far as the very first versions of Caldera) are vulnerable to a remote code execution (RCE) vulnerability that can be triggered in most default configurations

Headlines

• Feb. 28, 2025 - MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)
• Feb. 27, 2025 - MITRE Caldera security advisory warns of maximum severity flaw
• Feb. 25, 2025 - MITRE Caldera security tool gets perfect 10 in insecurity
• Feb. 25, 2025 - CVE-2025-27364 (CVSS 10): Remote Code Execution Flaw Found in MITRE Caldera, PoC Releases

CVE-2025-24989

CRITICAL CVSS 9.80 EPSS Score 2.32 EPSS Percentile 89.68

CISA Known Exploited Actively Exploited

Published: Feb. 19, 2025

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.

Vendor Impacted: Microsoft

Product Impacted: Power Pages

Quotes

• Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you’ve not been notified this vulnerability does not affect you

Headlines

• Feb. 25, 2025 - U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog
• Feb. 24, 2025 - ⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple’s Data Dilemma
• Feb. 23, 2025 - U.S. CISA adds Microsoft Power Pages flaw to its Known Exploited Vulnerabilities catalog

CVE-2024-49035

CRITICAL CVSS 9.80 EPSS Score 20.16 EPSS Percentile 96.43

CISA Known Exploited

Published: Nov. 26, 2024

An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.

Vendor Impacted: Microsoft

Product Impacted: Partner Center

Quotes

• An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network

Headlines

• Feb. 26, 2025 - U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
• Feb. 26, 2025 - CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
• Feb. 26, 2025 - CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities

CVE-2024-34331

CRITICAL CVSS 9.80 EPSS Score 0.04 EPSS Percentile 11.76

Actively Exploited

Published: Sept. 23, 2024

A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.

Quotes

• Immediately pull down the latest version
• Since the vendor Parallels is playing deaf and dumb, I have to disclose the 0 day exploit now
• Given that the vendor has left this vulnerability unaddressed for over seven months—despite prior disclosure—I have chosen to publicly disclose this 0-day exploit

Headlines

• Feb. 25, 2025 - MITRE Caldera security tool gets perfect 10 in insecurity
• Feb. 24, 2025 - Exploits for unpatched Parallels Desktop flaw give root on Macs
• Feb. 24, 2025 - 0-Day in Parallels Desktop Allows Root Privilege Escalation, PoC Released

CVE-2017-3066

CRITICAL CVSS 9.80 EPSS Score 97.07 EPSS Percentile 99.88

CISA Known Exploited Public Exploits Available

Published: April 27, 2017

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.

Vendor Impacted: Adobe

Product Impacted: Coldfusion

Quotes

• DOGE’s actions — firing technical experts, mishandling sensitive data, and breaking critical systems — contradict their stated mission of ‘modernizing Federal technology and software to maximize governmental efficiency and productivity’

Headlines

• Feb. 26, 2025 - Over 200 convincing GitHub repos serving up malware
• Feb. 25, 2025 - U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog
• Feb. 25, 2025 - CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM

CVE-2024-13159

CRITICAL CVSS 9.80 EPSS Score 0.05 EPSS Percentile 25.66

Remote Code Execution Public Exploits Available

Published: Jan. 14, 2025

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

Quotes

• Compromising the Endpoint Manager server itself would lead to the ability to compromise all of the EPM clients, making this avenue especially impactful
• The GetHashForWildcardRecursive() method defined in this class expects a string argument called wildcard and is passed to HashCalculator.GetHashForWildcardRecursive()

Headlines

• Feb. 25, 2025 - PoC Released: CVE-2024-13159 (CVSS 9.8) in Ivanti EPM Poses Severe Security Threat
• Feb. 24, 2025 - PoC exploit for Ivanti Endpoint Manager vulnerabilities released (CVE-2024-13159)

CVE-2023-34192

CRITICAL CVSS 9.00 EPSS Score 90.09 EPSS Percentile 99.09

CISA Known Exploited

Published: July 6, 2023

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

Vendors Impacted: Synacor, Zimbra

Products Impacted: Collaboration, Zimbra Collaboration Suite (Zcs)

Quotes

• An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network

Headlines

• Feb. 26, 2025 - U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
• Feb. 26, 2025 - CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
• Feb. 26, 2025 - CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities

CVE-2024-20953

HIGH CVSS 8.80 EPSS Score 2.21 EPSS Percentile 89.42

CISA Known Exploited

Published: Feb. 17, 2024

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vendor Impacted: Oracle

Products Impacted: Agile Product Lifecycle Management (Plm), Agile Product Lifecycle Management

Quotes

• DOGE’s actions — firing technical experts, mishandling sensitive data, and breaking critical systems — contradict their stated mission of ‘modernizing Federal technology and software to maximize governmental efficiency and productivity’

Headlines

• Feb. 26, 2025 - Over 200 convincing GitHub repos serving up malware
• Feb. 25, 2025 - U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog
• Feb. 25, 2025 - CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM

CVE-2023-20118

HIGH CVSS 7.20 EPSS Score 0.07 EPSS Percentile 33.22

Actively Exploited Remote Code Execution

Published: April 13, 2023

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability.

Vendor Impacted: Cisco

Products Impacted: Rv325 Firmware, Rv042g Firmware, Rv016, Rv016 Firmware, Rv325, Rv320, Rv082 Firmware, Rv320 Firmware, Rv042 Firmware, Rv042g, Rv042, Rv082

Quotes

• The binary informs the C2 server that it has successfully infected a new device
• On 22 January 2025, suspicious network traces were observed via our honeypots. Analysis indicated an attempt to exploit the CVE-2023-20118 vulnerability. Through this exploit, the attacker executed a remote command (RCE) to deploy a webshell on the target router

Headlines

• Feb. 27, 2025 - PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices
• Feb. 26, 2025 - PolarEdge Botnet: 2,000+ IoT Devices Infected