Vulnerability News - June 16, 2023

Snapshot

June 10, 2023 - June 16, 2023

CISA Known Exploited Vulnerabilities
CVE	Summary	Severity	Vendor	Date Added
CVE-2023-27997	Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.	CRITICAL	Fortinet	June 13, 2023
Newswires
Shell Falls Victim to Clop Ransomware Attack Exploiting MOVEit Zero-Day Vulnerability Oil and gas giant Shell has become a victim of the Clop ransomware attack, which exploits a zero-day vulnerability in the MOVEit software.				June 16, 2023
Millions of State IDs Stolen in Oregon and Louisiana Due to MOVEit Breach Millions of driver's licenses in Louisiana and Oregon were exposed in a data breach after the Clop ransomware gang hacked their MOVEit Transfer security file transfer systems.				June 16, 2023
Progress Addresses Third Flaw in MOVEit Transfer Software Progress Software recently revealed a new SQL injection vulnerability affecting its MOVEit Transfer application.				June 16, 2023
US Government Agencies Targeted in Clop Ransomware Attacks Exploiting MOVEit Vulnerability The US Department of Energy and other federal agencies have fallen victim to a series of cyberattacks by the Russian ransomware gang Clop, which exploited the MOVEit file-transfer vulnerability.				June 15, 2023
Chinese UNC4841 Group Targets Barracuda Email Security Gateway Zero-Day Vulnerability A China-nexus threat actor called UNC4841 has been exploiting a recently patched zero-day vulnerability in Barracuda Email Security Gateway (ESG) appliances since October 2022.				June 15, 2023
Critical Security Flaw Found in WooCommerce Stripe Gateway Plugin A critical security vulnerability has been discovered in the WooCommerce Stripe Gateway WordPress plugin, potentially leading to unauthorized disclosure of sensitive data.				June 14, 2023
Microsoft's June 2023 Patch Tuesday Addresses 78 Vulnerabilities, Including 38 RCE Bugs Microsoft has released its June 2023 Patch Tuesday update, which addresses 78 security flaws, including 38 remote code execution (RCE) vulnerabilities.				June 13, 2023
Chinese Hackers Exploit VMware ESXi Zero-Day to Compromise VMs VMware has patched a zero-day vulnerability (CVE-2023-20867) in its ESXi product after it was exploited by Chinese-sponsored hacking group UNC3886 to backdoor Windows and Linux virtual machines and steal data.				June 13, 2023
UK Regulator Ofcom Hit by Clop Ransomware via MOVEit File Transfer Zero-Day Ofcom, the UK's communications regulator, has disclosed a data breach after being targeted by a Clop ransomware attack.				June 13, 2023
Fortinet Warns of Potential Exploitation of New FortiOS RCE Vulnerability Fortinet has reported that a critical FortiOS SSL VPN vulnerability, which was patched last week, might have been exploited in attacks targeting government, manufacturing, and critical infrastructure organizations.				June 12, 2023
Exploit for MOVEit RCE Bug Released, Used in Data Theft Attacks Horizon3 security researchers have recently made public a proof-of-concept (PoC) exploit code for a remote code execution (RCE) vulnerability in the MOVEit Transfer managed file transfer (MFT) solution.				June 12, 2023
Fortinet Addresses Critical RCE Vulnerability in Fortigate SSL-VPN Devices Fortinet has released firmware updates for its Fortigate devices, addressing a critical pre-authentication remote code execution (RCE) vulnerability in SSL VPN devices.				June 11, 2023
Vulnerabilities In The News
CVE	Summary	Severity	Vendor	Risk Context
CVE-2023-34362 (23)	In Progress MOVEit Transfer before 2021.0.6 , 2021.1.4 , 2022.0.4 , 2022.1.5 , and 2023.0.1 , a SQL injection vulnerability h...	CRITICAL	Progress	CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available
CVE-2023-27997 (17)	A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6....	CRITICAL	Fortinet	CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available
CVE-2023-32015 (11)	Windows Pragmatic General Multicast Remote Code Execution Vulnerability	CRITICAL		Remote Code Execution
CVE-2023-32014 (11)	Windows Pragmatic General Multicast Remote Code Execution Vulnerability	CRITICAL		Remote Code Execution
CVE-2023-29363 (10)	Windows Pragmatic General Multicast Remote Code Execution Vulnerability	CRITICAL		Remote Code Execution
CVE-2023-29357 (10)	Microsoft SharePoint Server Elevation of Privilege Vulnerability	CRITICAL		Risk Context N/A
CVE-2023-2868 (10)	A remote command injection vulnerability exists in the Barracuda Email Security Gateway product effecting versions 5.1.3.001...	CRITICAL	Barracuda, Barracuda Networks	CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available
CVE-2023-3079 (7)	Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruptio...	HIGH	Debian, Google	CISA Known Exploited Actively Exploited Remote Code Execution
CVE-2023-20867 (8)	A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confiden...	LOW		Actively Exploited Remote Code Execution
CVE-2023-35036 (10)	In Progress MOVEit Transfer before 2021.0.7 , 2021.1.5 , 2022.0.5 , 2022.1.6 , and 2023.0.2 , SQL injection vulnerabilities h...	N/A		Risk Context N/A

CISA Known Exploited Vulnerabilities

CISA added one vulnerability to the known exploited vulnerabilities list.

Fortinet — FortiOS and FortiProxy SSL-VPN

CVE-2023-27997 / Added: June 13, 2023

CRITICAL CVSS 9.80 EPSS Score 1.27 EPSS Percentile 83.74

Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.

Headlines

June 16, 2023 - This Week In Security: ACME.sh, Leaking LEDs, And Android Apps
June 15, 2023 - CISA Order Highlights Persistent Risk at Network Edge –
June 14, 2023 - Fortinet: Patched Critical Flaw May Have Been Exploited
June 13, 2023 - A smorgasbord for June’s Patch Tuesday
June 13, 2023 - Fortinet Addresses Critical FortiGate SSL-VPN Vulnerability
June 13, 2023 - Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls
June 13, 2023 - Fortinet Warns Customers of Possible Zero-Day Exploited in Limited Attacks
June 13, 2023 - Critical FortiOS and FortiProxy Vulnerability Likely Exploited - Patch Now!
June 12, 2023 - Fortinet: New FortiOS RCE bug "may have been exploited" in attacks
June 12, 2023 - Fortinet fixes critical RCE in FortiOS, FortiProxy SSL-VPN
June 12, 2023 - Fortinet Releases Security Updates for FortiOS and FortiProxy | CISA
June 12, 2023 - Fortinet urges to patch a critical RCE flaw in Fortigate firewalls
June 12, 2023 - Fortinet Patches Critical FortiGate SSL VPN Vulnerability
June 12, 2023 - Critical RCE Flaw Discovered in Fortinet FortiGate Firewalls - Patch Now!
June 11, 2023 - Fortinet patches pre-auth RCE, update your Fortigate firewalls ASAP! (CVE-2023-27997)
June 11, 2023 - CVE-2023-27997: Fortinet FortiGate Pre-Auth RCE Vulnerability
June 11, 2023 - Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now

In The News

Vulnerabilities receiving the most attention in traditional news media.

CVE-2023-34362

CRITICAL CVSS 9.80 EPSS Score 81.12 EPSS Percentile 97.85

CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available

Published: June 2, 2023

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, and execute SQL statements that alter or delete database elements. NOTE: this is exploited in the wild in May and June 2023; exploitation of unpatched systems can occur via HTTP or HTTPS. All versions (e.g., 2020.0 and 2019x) before the five explicitly mentioned versions are affected, including older unsupported versions.

Vendor Impacted: Progress

Products Impacted: Moveit Transfer, Moveit Cloud

Quotes

We are aware of a cyber security incident that has impacted a third-party tool from Progress called MOVEit Transfer, which is used by a small number of Shell employees and customers
Louisiana's Office of Motor Vehicles (OMV) is one of a still undetermined number of government entities, major businesses and organizations to be affected by the unprecedented MOVEit data breach
Progress has discovered a vulnerability in MOVEit Transfer that could lead to escalated privileges and potential unauthorized access to the environment
Could lead to escalated privileges and potential unauthorized access to the environment
Disable HTTP and HTTPS traffic to MOVEit Transfer
Could potentially be used by a bad actor to stage an exploit
In addition to the ongoing investigation into vulnerability (CVE-2023-34362), we have partnered with third-party cybersecurity experts to conduct further detailed code reviews as an added layer of protection for our customers
These files contained information about approximately 95,000 names of students placed in foster care throughout the state, 124 students in the Perham School District who qualified for Pandemic Electronic Benefits Transfer (P-EBT), 29 students who were taking PSEO classes at Hennepin Technical College in Minneapolis, and five students who took a particular Minneapolis Public Schools bus route
A limited amount of information about certain companies we regulate – some of it confidential – along with personal data of 412 Ofcom employees, was downloaded during the attack
A SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to MOVEit Transfer’s database
This POC abuses an SQL injection to obtain a sysadmin API access token and then use that access to abuse a deserialization call to obtain remote code execution
An attacker could submit a crafted payload to a MOVEit Transfer application endpoint which could result in modification and disclosure of MOVEit database content
The investigation is ongoing, but currently, we have not seen indications that these newly discovered vulnerabilities have been exploited
SQL Injection (CVE pending MITRE) In Progress MOVEit Transfer versions released before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), 2023.0.2 (15.0.2), multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to the MOVEit Transfer database
Multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database

Headlines

CVE-2023-27997

CRITICAL CVSS 9.80 EPSS Score 1.27 EPSS Percentile 83.74

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: June 13, 2023

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

Vendor Impacted: Fortinet

Product Impacted: Fortios And Fortiproxy Ssl-Vpn

Quotes

Belonging to individuals working for a government with political or strategic interest to [China] while this victim government was participating in high-level, diplomatic meetings with other countries
A limited number of cases
Fortinet has had to respond to a number of recent vulnerabilities, and this is another good example
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests
May have been exploited in a limited number of cases
Exploited in a limited number of cases
Our investigation found that one issue (FG-IR-23-097) may have been exploited in a limited number of cases and we are working closely with customers to monitor the situation
This is reachable pre-authentication, on every SSL VPN appliance
A new critical flaw, not made public at this stage, concerns Fortinet on its Fortigate firewalls, more specifically the SSL VPN functionalities
Reachable pre-authentication, on every SSL VPN appliance
Interfere via the VPN, even if MFA is activated
The flaw would allow a hostile agent to interfere via the VPN, even if the MFA is activated

Headlines

CVE-2023-32015

CRITICAL CVSS 9.80 EPSS Score 0.24 EPSS Percentile 60.54

Remote Code Execution

Published: June 14, 2023

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Quotes

Best bet is to test and deploy the update as soon as possible
Microsoft isn’t aware of public disclosure or in-the-wild exploitation, but considers exploitation more likely
An attacker who has gained access to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
When Windows message queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
More likely to be exploited
Gained access to spoofed JWT authentication tokens, they can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
This bug was one of the bugs chained together during the Pwn2Own Vancouver contest held back in March. This particular bug was used to bypass authentication due to a flaw within the ValidateTokenIssuer method
This is the third month in a row for PGM to have a CVSS 9.8 bug addressed, and it’s beginning to be a bit of a theme

Headlines

CVE-2023-32014

CRITICAL CVSS 9.80 EPSS Score 0.24 EPSS Percentile 60.54

Remote Code Execution

Published: June 14, 2023

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Quotes

Best bet is to test and deploy the update as soon as possible
Microsoft isn’t aware of public disclosure or in-the-wild exploitation, but considers exploitation more likely
An attacker who has gained access to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
When Windows message queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
More likely to be exploited
Gained access to spoofed JWT authentication tokens, they can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
This bug was one of the bugs chained together during the Pwn2Own Vancouver contest held back in March. This particular bug was used to bypass authentication due to a flaw within the ValidateTokenIssuer method
This is the third month in a row for PGM to have a CVSS 9.8 bug addressed, and it’s beginning to be a bit of a theme

Headlines

CVE-2023-29363

CRITICAL CVSS 9.80 EPSS Score 0.24 EPSS Percentile 60.54

Remote Code Execution

Published: June 14, 2023

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Quotes

Microsoft isn’t aware of public disclosure or in-the-wild exploitation, but considers exploitation more likely
An attacker who has gained access to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
When Windows message queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
More likely to be exploited
Gained access to spoofed JWT authentication tokens, they can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
This bug was one of the bugs chained together during the Pwn2Own Vancouver contest held back in March. This particular bug was used to bypass authentication due to a flaw within the ValidateTokenIssuer method
This is the third month in a row for PGM to have a CVSS 9.8 bug addressed, and it’s beginning to be a bit of a theme

Headlines

CVE-2023-29357

CRITICAL CVSS 9.80 EPSS Score 0.09 EPSS Percentile 37.86

Risk Context N/A

Published: June 14, 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Quotes

Best bet is to test and deploy the update as soon as possible
Microsoft isn’t aware of public disclosure or in-the-wild exploitation, but considers exploitation more likely
An attacker who has gained access to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
When Windows message queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
More likely to be exploited
Gained access to spoofed JWT authentication tokens, they can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
This bug was one of the bugs chained together during the Pwn2Own Vancouver contest held back in March. This particular bug was used to bypass authentication due to a flaw within the ValidateTokenIssuer method

Headlines

CVE-2023-2868

CRITICAL CVSS 9.80 EPSS Score 1.64 EPSS Percentile 85.70

CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available

Published: May 24, 2023

A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives). The vulnerability stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contained within the archive. As a consequence, a remote attacker can specifically format these file names in a particular manner that will result in remotely executing a system command through Perl's qx operator with the privileges of the Email Security Gateway product. This issue was fixed as part of BNSF-36456 patch. This patch was automatically applied to all customer appliances.

Vendors Impacted: Barracuda, Barracuda Networks

Products Impacted: Email Security Gateway (Esg) Appliance, Email Security Gateway 900, Email Security Gateway 400 Firmware, Email Security Gateway 600, Email Security Gateway 400, Email Security Gateway 300, Email Security Gateway 800, Email Security Gateway 800 Firmware, Email Security Gateway 600 Firmware, Email Security Gateway 900 Firmware, Email Security Gateway 300 Firmware

Quotes

Spanning a multitude of regions and sectors
Post initial compromise, Mandiant and Barracuda observed UNC4841 aggressively target specific data of interest for exfiltration, and in some cases, leverage access to an ESG appliance to conduct lateral movement into the victim network, or to send mail to other victim appliances
With high confidence that UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People's Republic of China
Through the investigation, Mandiant identified a suspected China-nexus actor, currently tracked as UNC4841, targeting a subset of Barracuda ESG appliances to utilize as a vector for espionage, spanning a multitude of regions and sectors
Mandiant assesses with high confidence that UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People's Republic of China
UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People's Republic of China
Due to the sophistication displayed by UNC4841 and lack of full visibility into all compromised appliances, Barracuda has elected to replace and not reimage the appliance from the recovery partition out of an abundance of caution
Broadest cyber espionage campaign known to be conducted by a China-nexus threat actor since the mass exploitation of Microsoft Exchange in early 2021
The potential vulnerability was detected as being present and the ACT Cyber Security Centre immediately completed a rebuild of the impacted Barracuda system to eliminate any ongoing vulnerability

Headlines

CVE-2023-3079

HIGH CVSS 8.80 EPSS Score 0.18 EPSS Percentile 53.83

CISA Known Exploited Actively Exploited Remote Code Execution

Published: June 5, 2023

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendors Impacted: Debian, Google

Products Impacted: Debian Linux, Chromium V8 Engine

Quotes

An attacker who has gained access to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user
This bug was one of the bugs chained together during the Pwn2Own Vancouver contest held back in March. This particular bug was used to bypass authentication due to a flaw within the ValidateTokenIssuer method
This is the third month in a row for PGM to have a CVSS 9.8 bug addressed, and it’s beginning to be a bit of a theme
Regardless of patch version level

Headlines

CVE-2023-20867

LOW CVSS 3.90 EPSS Score 0.04 EPSS Percentile 7.00

Actively Exploited Remote Code Execution

Published: June 13, 2023

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Quotes

Mandiant assesses with high confidence that UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People's Republic of China
Enabled the execution of privileged commands across Windows, Linux, and PhotonOS (vCenter) guest VMs without authentication of guest credentials from a compromised ESXi host and no default logging on guest VMs
VMware Tools contains an Authentication Bypass vulnerability in the vgauth module
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine
This … enabled direct reconnection from any guest VM to the compromised ESXi host’s backdoor regardless of network segmentation or firewall rules in place
Gained access to spoofed JWT authentication tokens, they can use them to execute a network attack which bypasses authentication and allows them to gain access to the privileges of an authenticated user

Headlines

CVE-2023-35036

CVSS Not Assigned EPSS Score 0.04 EPSS Percentile 8.37

Risk Context N/A

Published: June 12, 2023

In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.

Quotes

Could lead to escalated privileges and potential unauthorized access to the environment
Progress has discovered a vulnerability in MOVEit Transfer that could lead to escalated privileges and potential unauthorized access to the environment
These files contained information about approximately 95,000 names of students placed in foster care throughout the state, 124 students in the Perham School District who qualified for Pandemic Electronic Benefits Transfer (P-EBT), 29 students who were taking PSEO classes at Hennepin Technical College in Minneapolis, and five students who took a particular Minneapolis Public Schools bus route
A limited amount of information about certain companies we regulate – some of it confidential – along with personal data of 412 Ofcom employees, was downloaded during the attack
Could potentially be used by a bad actor to stage an exploit

Headlines

Vulnerability and threat intelligence direct to your inbox every week.

Subscribe to Pulse

Accelerate Security Teams

Schedule a free consultation with a vulnerability expert to discuss your use cases and to see a demo.

Request a Demo

Solutions

By Solution

By Feature

I Want To…

Learn More

VULNERA vs Vulnerability Scanners

Who It’s For

CISO’s

IT & Security Teams

Risk & Compliance

Security Assessment Buyers Guide

Resources

Resources

Blog

Threat Intelligence

I Want To…

Learn More

Top 10 Vulnerability Management Questions Answered

About

About

Partners

I Want To…

Learn More

Simplifying Vulnerability Management

VULNERA Pulse

A digest of noteworthy issues being discussed in the information security industry.

June 16, 2023

Subscribe

Accelerate Security Teams

Quick Menu

Solutions

Features

CISO Challenges

IT Challenges

Compliance

Subscribe

By Solution

By Feature

I Want To…

Learn More

VULNERA vs Vulnerability Scanners

Security Assessment Buyers Guide

Resources

Resources

Blog

Threat Intelligence

I Want To…

Learn More

Top 10 Vulnerability Management Questions Answered

About

About

Partners

I Want To…

Learn More

Simplifying Vulnerability Management

VULNERA Pulse

A digest of noteworthy issues being discussed in the information security industry.

June 16, 2023

Snapshot

CISA Known Exploited Vulnerabilities

Newswires

Vulnerabilities In The News

CISA Known Exploited Vulnerabilities

Fortinet — FortiOS and FortiProxy SSL-VPN

In The News

Subscribe

Accelerate Security Teams

Quick Menu

Features

Subscribe