Het CSIRT-DSP maakt op wekelijkse basis een selectie van kwetsbaarheden, waarbij het CSIRT-DSP de inschatting heeft gemaakt dat deze relevant zijn voor digitale dienstverleners.
Het betreft een selectie van 'Medium' en 'High' kwetsbaarheden. Voor de inschatting hiervan wordt er gebruik gemaakt van de CVSS 3.1 base scores indien deze beschikbaar zijn. Indien deze niet beschikbaar zijn, zal dit worden aangegeven met 'n/a'.
Critical & High
GitLab EE / CE
https://nvd.nist.gov/vuln/detail/CVE-2022-2826 (9.8)
Hitachi Infrastructure Analytics Advisor / Ops Center Analyzer (Linux)
https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hit… (9.8-6.5)
Octopus Server
https://nvd.nist.gov/vuln/detail/CVE-2022-2572 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2022-2782 (9.1)
https://nvd.nist.gov/vuln/detail/CVE-2022-2508 (5.3)
Redis
https://nvd.nist.gov/vuln/detail/CVE-2022-3734 (9.8)
Zoom Client for Meetings
https://nvd.nist.gov/vuln/detail/CVE-2022-28763 (9.6)
Bitdefender Engines
https://nvd.nist.gov/vuln/detail/CVE-2022-3369 (8.6)
OctoRPKI
https://nvd.nist.gov/vuln/detail/CVE-2022-3616 (7.5)
OpenBMC
https://nvd.nist.gov/vuln/detail/CVE-2022-3409 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2022-2809 (7.5)
OpenNebula
https://nvd.nist.gov/vuln/detail/CVE-2022-37426 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2022-37424 (6.5)
Citrix Hypervisor / Xen
https://support.citrix.com/article/CTX472851/citrix-hypervisor-security… (n/a)
https://xenbits.xenproject.org/xsa/advisory-412.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-414.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-415.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-416.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-417.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-418.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-419.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-420.html (n/a)
https://xenbits.xenproject.org/xsa/advisory-421.html (n/a)
GitHub Enterprise Server
https://nvd.nist.gov/vuln/detail/CVE-2022-23738 (n/a)
OpenSSL
https://nvd.nist.gov/vuln/detail/CVE-2022-3602 (n/a)
https://nvd.nist.gov/vuln/detail/CVE-2022-3786 (n/a)
Medium
Nextcloud Server / Entreprise Server
https://nvd.nist.gov/vuln/detail/CVE-2022-39364 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2022-39329 (5.3)
https://nvd.nist.gov/vuln/detail/CVE-2022-39330 (4.3)
Tenable Nessus
https://nvd.nist.gov/vuln/detail/CVE-2022-33757 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2022-3499 (6.3)
HashiCorp Boundary
https://nvd.nist.gov/vuln/detail/CVE-2022-36182 (6.1)
HCL Launch Container
https://nvd.nist.gov/vuln/detail/CVE-2021-27784 (5.9)
GitLab CE/EE
https://nvd.nist.gov/vuln/detail/CVE-2022-3018 (4.9)
https://nvd.nist.gov/vuln/detail/CVE-2022-2882 (4.3)
Devolutions Remote Desktop Manager
https://nvd.nist.gov/vuln/detail/CVE-2022-3780 (n/a)
https://nvd.nist.gov/vuln/detail/CVE-2022-3781 (n/a)