Latest News: Adobe security advisory (AV24–511) – Canadian Centre for Cyber SecurityCISA Advisory: Citrix Releases Security Updates for Citrix Workspace App for WindowsMicrosoft security advisory – September 2024 monthly rollup (AV24-510)SAP security advisory – September 2024 monthly rollup (AV24-506)[Control systems] CISA ICS security advisories (AV24-500)Red Hat security advisory (AV24-502)Progress security advisory (AV24-504) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-505) – Canadian Centre for Cyber SecurityDell security advisory (AV24-503) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds Three Known Exploited Vulnerabilities to CatalogUbuntu security advisory (AV24-501) – Canadian Centre for Cyber SecurityCISA Advisory: Baxter Connex Health Portal | CISACISA Advisory: Russian Military Cyber Actors Target US and Global Critical InfrastructureCISA Advisory: CISA Releases Four Industrial Control Systems AdvisoriesCISA Advisory: Hughes Network Systems WL3000 Fusion SoftwareCISA Advisory: FBI, CISA, NSA, and US and International Partners Release Advisory on Russian Military Cyber Actors Targeting US and Global Critical InfrastructureVeeam security advisory (AV24-499) – Canadian Centre for Cyber SecurityCisco security advisory (AV24-485) – Canadian Centre for Cyber SecurityDell security advisory (AV24-488) – Canadian Centre for Cyber SecurityCisco security advisory (AV24-497) – Canadian Centre for Cyber SecurityDrupal security advisory (AV24-498) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-489) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Releases One Industrial Control Systems AdvisoryUbuntu security advisory (AV24-490) – Canadian Centre for Cyber Security[Control systems] CISA ICS security advisories (AV24-491)CISA Advisory: CISA Adds Three Known Exploited Vulnerabilities to CatalogRed Hat security advisory (AV24-492)VMware security advisory (AV24-494) – Canadian Centre for Cyber SecurityHPE security advisory (AV24-495) – Canadian Centre for Cyber SecurityCISA Advisory: LOYTEC Electronics LINX Series | CISAAndroid security advisory – September 2024 Monthly Rollup (AV24-496)Mozilla security advisory (AV24-493) – Canadian Centre for Cyber SecurityTechMinds: A Review of the RigExpert FobosSDRCISA Advisory: #StopRansomware: RansomHub Ransomware | CISACISA Advisory: Delta Electronics DTN Soft | CISACISA Advisory: CISA and Partners Release Advisory on RansomHub RansomwareCISA Advisory: CISA Releases Three Industrial Control Systems AdvisoriesCISA Advisory: Rockwell Automation ThinManager ThinServer | CISAFortra security advisory (AV24-486) – Canadian Centre for Cyber SecurityCISA Advisory: Iran-based Cyber Actors Enabling Ransomware Attacks on US OrganizationsGoogle Chrome security advisory (AV24-487)CISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogCISA Advisory: CISA and Partners Release Advisory on Iran-based Cyber Actors Enabling Ransomware Attacks on US OrganizationsHackRF and Portapack Featured in Recent Linus Tech Tips VideoCISA Advisory: Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-39717[Control systems] B&R security advisory (AV24-484)CISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogFoxit security advisory (AV24-483) – Canadian Centre for Cyber Security[Control systems] CISA ICS security advisories (AV24-478)Ubuntu security advisory (AV24-479) – Canadian Centre for Cyber SecurityDell security advisory (AV24-480) – Canadian Centre for Cyber SecurityRed Hat security advisory (AV24-481)CISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogIBM security advisory (AV24-482) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds One Known Exploited Vulnerability to Catalog for Versa Networks DirectorSonicWall security advisory (AV24-477) – Canadian Centre for Cyber SecurityMicrosoft Edge security advisory (AV24-476)Red Hat security advisory (AV24-427)Apple security advisory (AV24-428) – Canadian Centre for Cyber SecurityHPE security advisory (AV24-429) – Canadian Centre for Cyber SecurityGoogle Chrome security advisory (AV24-430)CISA Advisory: Rockwell Automation 5015 – AENFTXTDrupal security advisory (AV24-473) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Releases Five Industrial Control Systems AdvisoriesGoogle Chrome security advisory (AV24-474)CISA Advisory: MOBOTIX P3 and Mx6 CamerasSolarWinds security advisory (AV24-475) – Canadian Centre for Cyber SecurityCISA Advisory: Rockwell Automation Emulate3D | CISACisco security advisory (AV24-472) – Canadian Centre for Cyber SecurityCISA Advisory: Avtec Outpost 0810 | CISAHPE security advisory (AV24-431) – Canadian Centre for Cyber SecurityMicrosoft Edge security advisory (AV24-432)Dell security advisory (AV24-433) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-434) – Canadian Centre for Cyber SecurityCISA Advisory: Best Practices for Event Logging and Threat DetectionGitHub security advisory (AV24-470) – Canadian Centre for Cyber SecurityCISA Advisory: ASD’s ACSC, CISA, FBI, and NSA, with the support of International Partners Release Best Practices for Event Logging and Threat DetectionMitel security advisory (AV24-471) – Canadian Centre for Cyber SecurityUbuntu security advisory (AV24-435) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds Four Known Exploited Vulnerabilities to CatalogAtlassian security advisory (AV24-469) – Canadian Centre for Cyber SecurityAndroid security advisory – August 2024 Monthly Rollup (AV24-436)[Control systems] CISA ICS security advisories (AV24-437)Moving on from WXtoIMG for NOAA APT Weather Satellite DecodingRed Hat security advisory (AV24-438)Exploring Russian and International Analog TV From Leaky Cable TV Networks via the Airspy Server NetworkMozilla security advisory (AV24-439) – Canadian Centre for Cyber SecurityHPE security advisory (AV24-440) – Canadian Centre for Cyber SecurityGoogle Chrome security advisory (AV24-441)HPE security advisory (AV24-442) – Canadian Centre for Cyber SecurityCisco security advisory (AV24-443) – Canadian Centre for Cyber SecurityF5 security advisory (AV24-463) – Canadian Centre for Cyber SecurityUbuntu security advisory (AV24-464) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-466) – Canadian Centre for Cyber SecurityRed Hat security advisory (AV24-467)[Control systems] CISA ICS security advisories (AV24-468)Dell security advisory (AV24-465) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogJenkins security advisory (AV24-444) – Canadian Centre for Cyber SecurityDrupal security advisory (AV24-445) – Canadian Centre for Cyber Security
Wed. Sep 11th, 2024
Latest News: Adobe security advisory (AV24–511) – Canadian Centre for Cyber SecurityCISA Advisory: Citrix Releases Security Updates for Citrix Workspace App for WindowsMicrosoft security advisory – September 2024 monthly rollup (AV24-510)SAP security advisory – September 2024 monthly rollup (AV24-506)[Control systems] CISA ICS security advisories (AV24-500)Red Hat security advisory (AV24-502)Progress security advisory (AV24-504) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-505) – Canadian Centre for Cyber SecurityDell security advisory (AV24-503) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds Three Known Exploited Vulnerabilities to CatalogUbuntu security advisory (AV24-501) – Canadian Centre for Cyber SecurityCISA Advisory: Baxter Connex Health Portal | CISACISA Advisory: Russian Military Cyber Actors Target US and Global Critical InfrastructureCISA Advisory: CISA Releases Four Industrial Control Systems AdvisoriesCISA Advisory: Hughes Network Systems WL3000 Fusion SoftwareCISA Advisory: FBI, CISA, NSA, and US and International Partners Release Advisory on Russian Military Cyber Actors Targeting US and Global Critical InfrastructureVeeam security advisory (AV24-499) – Canadian Centre for Cyber SecurityCisco security advisory (AV24-485) – Canadian Centre for Cyber SecurityDell security advisory (AV24-488) – Canadian Centre for Cyber SecurityCisco security advisory (AV24-497) – Canadian Centre for Cyber SecurityDrupal security advisory (AV24-498) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-489) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Releases One Industrial Control Systems AdvisoryUbuntu security advisory (AV24-490) – Canadian Centre for Cyber Security[Control systems] CISA ICS security advisories (AV24-491)CISA Advisory: CISA Adds Three Known Exploited Vulnerabilities to CatalogRed Hat security advisory (AV24-492)VMware security advisory (AV24-494) – Canadian Centre for Cyber SecurityHPE security advisory (AV24-495) – Canadian Centre for Cyber SecurityCISA Advisory: LOYTEC Electronics LINX Series | CISAAndroid security advisory – September 2024 Monthly Rollup (AV24-496)Mozilla security advisory (AV24-493) – Canadian Centre for Cyber SecurityTechMinds: A Review of the RigExpert FobosSDRCISA Advisory: #StopRansomware: RansomHub Ransomware | CISACISA Advisory: Delta Electronics DTN Soft | CISACISA Advisory: CISA and Partners Release Advisory on RansomHub RansomwareCISA Advisory: CISA Releases Three Industrial Control Systems AdvisoriesCISA Advisory: Rockwell Automation ThinManager ThinServer | CISAFortra security advisory (AV24-486) – Canadian Centre for Cyber SecurityCISA Advisory: Iran-based Cyber Actors Enabling Ransomware Attacks on US OrganizationsGoogle Chrome security advisory (AV24-487)CISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogCISA Advisory: CISA and Partners Release Advisory on Iran-based Cyber Actors Enabling Ransomware Attacks on US OrganizationsHackRF and Portapack Featured in Recent Linus Tech Tips VideoCISA Advisory: Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-39717[Control systems] B&R security advisory (AV24-484)CISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogFoxit security advisory (AV24-483) – Canadian Centre for Cyber Security[Control systems] CISA ICS security advisories (AV24-478)Ubuntu security advisory (AV24-479) – Canadian Centre for Cyber SecurityDell security advisory (AV24-480) – Canadian Centre for Cyber SecurityRed Hat security advisory (AV24-481)CISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogIBM security advisory (AV24-482) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds One Known Exploited Vulnerability to Catalog for Versa Networks DirectorSonicWall security advisory (AV24-477) – Canadian Centre for Cyber SecurityMicrosoft Edge security advisory (AV24-476)Red Hat security advisory (AV24-427)Apple security advisory (AV24-428) – Canadian Centre for Cyber SecurityHPE security advisory (AV24-429) – Canadian Centre for Cyber SecurityGoogle Chrome security advisory (AV24-430)CISA Advisory: Rockwell Automation 5015 – AENFTXTDrupal security advisory (AV24-473) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Releases Five Industrial Control Systems AdvisoriesGoogle Chrome security advisory (AV24-474)CISA Advisory: MOBOTIX P3 and Mx6 CamerasSolarWinds security advisory (AV24-475) – Canadian Centre for Cyber SecurityCISA Advisory: Rockwell Automation Emulate3D | CISACisco security advisory (AV24-472) – Canadian Centre for Cyber SecurityCISA Advisory: Avtec Outpost 0810 | CISAHPE security advisory (AV24-431) – Canadian Centre for Cyber SecurityMicrosoft Edge security advisory (AV24-432)Dell security advisory (AV24-433) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-434) – Canadian Centre for Cyber SecurityCISA Advisory: Best Practices for Event Logging and Threat DetectionGitHub security advisory (AV24-470) – Canadian Centre for Cyber SecurityCISA Advisory: ASD’s ACSC, CISA, FBI, and NSA, with the support of International Partners Release Best Practices for Event Logging and Threat DetectionMitel security advisory (AV24-471) – Canadian Centre for Cyber SecurityUbuntu security advisory (AV24-435) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds Four Known Exploited Vulnerabilities to CatalogAtlassian security advisory (AV24-469) – Canadian Centre for Cyber SecurityAndroid security advisory – August 2024 Monthly Rollup (AV24-436)[Control systems] CISA ICS security advisories (AV24-437)Moving on from WXtoIMG for NOAA APT Weather Satellite DecodingRed Hat security advisory (AV24-438)Exploring Russian and International Analog TV From Leaky Cable TV Networks via the Airspy Server NetworkMozilla security advisory (AV24-439) – Canadian Centre for Cyber SecurityHPE security advisory (AV24-440) – Canadian Centre for Cyber SecurityGoogle Chrome security advisory (AV24-441)HPE security advisory (AV24-442) – Canadian Centre for Cyber SecurityCisco security advisory (AV24-443) – Canadian Centre for Cyber SecurityF5 security advisory (AV24-463) – Canadian Centre for Cyber SecurityUbuntu security advisory (AV24-464) – Canadian Centre for Cyber SecurityIBM security advisory (AV24-466) – Canadian Centre for Cyber SecurityRed Hat security advisory (AV24-467)[Control systems] CISA ICS security advisories (AV24-468)Dell security advisory (AV24-465) – Canadian Centre for Cyber SecurityCISA Advisory: CISA Adds One Known Exploited Vulnerability to CatalogJenkins security advisory (AV24-444) – Canadian Centre for Cyber SecurityDrupal security advisory (AV24-445) – Canadian Centre for Cyber Security
Wed. Sep 11th, 2024

CISA Advisory: CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

  • CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.



This alert was originated from: Cybersecurity & Infrastructure Security Agency ( CISA )

https://www.cisa.gov/news-events/alerts/2024/08/19/cisa-adds-one-known-exploited-vulnerability-catalog

    • Ricardo Alonso

    Related Posts

    Adobe security advisory (AV24–511) – Canadian Centre for Cyber Security
    Adobe security advisory (AV24–511) – Canadian Centre for Cyber Security

    Serial number: AV24-511Date: September 10, 2024 On September 10, 2024, Adobe published security advisories to address vulnerabilities in the following products: Acrobat DC – versions 24.003.20054 and prior (Windows), version 24.002.21005 and…

    Continue reading
    CISA Advisory: Citrix Releases Security Updates for Citrix Workspace App for Windows
    CISA Advisory: Citrix Releases Security Updates for Citrix Workspace App for Windows

    This alert was originated from: Cybersecurity & Infrastructure Security Agency ( CISA ) Citrix released security updates to address multiple vulnerabilities in the Citrix Workspace App for Windows. A cyber…

    Continue reading

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    You Missed

    Cybersecurity

    Adobe security advisory (AV24–511) – Canadian Centre for Cyber Security

    Adobe security advisory (AV24–511) – Canadian Centre for Cyber Security
    Cybersecurity

    CISA Advisory: Citrix Releases Security Updates for Citrix Workspace App for Windows

    CISA Advisory: Citrix Releases Security Updates for Citrix Workspace App for Windows
    Cybersecurity

    Microsoft security advisory – September 2024 monthly rollup (AV24-510)

    Microsoft security advisory – September 2024 monthly rollup (AV24-510)
    Cybersecurity

    SAP security advisory – September 2024 monthly rollup (AV24-506)

    SAP security advisory – September 2024 monthly rollup (AV24-506)
    Cybersecurity

    [Control systems] CISA ICS security advisories (AV24-500)

    [Control systems] CISA ICS security advisories (AV24-500)
    Cybersecurity

    Red Hat security advisory (AV24-502)

    Red Hat security advisory (AV24-502)