|
1 | 1 | { |
2 | 2 | "title": "CISA Catalog of Known Exploited Vulnerabilities", |
3 | | - "catalogVersion": "2025.04.28", |
4 | | - "dateReleased": "2025-04-28T17:02:25.9088Z", |
5 | | - "count": 1326, |
| 3 | + "catalogVersion": "2025.04.29", |
| 4 | + "dateReleased": "2025-04-29T16:56:06.3657Z", |
| 5 | + "count": 1327, |
6 | 6 | "vulnerabilities": [ |
| 7 | + { |
| 8 | + "cveID": "CVE-2025-31324", |
| 9 | + "vendorProject": "SAP", |
| 10 | + "product": "NetWeaver", |
| 11 | + "vulnerabilityName": "SAP NetWeaver Unrestricted File Upload Vulnerability", |
| 12 | + "dateAdded": "2025-04-29", |
| 13 | + "shortDescription": "SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.", |
| 14 | + "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", |
| 15 | + "dueDate": "2025-05-20", |
| 16 | + "knownRansomwareCampaignUse": "Unknown", |
| 17 | + "notes": "https:\/\/me.sap.com\/notes\/3594142 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-31324", |
| 18 | + "cwes": [ |
| 19 | + "CWE-434" |
| 20 | + ] |
| 21 | + }, |
7 | 22 | { |
8 | 23 | "cveID": "CVE-2025-1976", |
9 | 24 | "vendorProject": "Broadcom", |
|
42 | 57 | "dateAdded": "2025-04-28", |
43 | 58 | "shortDescription": "Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.", |
44 | 59 | "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", |
45 | | - "dueDate": "2025-05-17", |
| 60 | + "dueDate": "2025-05-19", |
46 | 61 | "knownRansomwareCampaignUse": "Unknown", |
47 | | - "notes": "https:\/\/documentation.commvault.com\/securityadvisories\/CV_2025_03_1.html ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-3928", |
| 62 | + "notes": "https:\/\/documentation.commvault.com\/securityadvisories\/CV_2025_03_1.html; https:\/\/www.commvault.com\/blogs\/notice-security-advisory-update; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-3928 ", |
48 | 63 | "cwes": [] |
49 | 64 | }, |
50 | 65 | { |
|
0 commit comments