Oracle E-Business Suite Unspecified Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2022-21587
Assessment context
CISA lists it as exploited, including by ransomware
Weekly briefing
Week 5 · 30 Jan – 5 Feb 2023 UTC · assess the changes, then plan the next dates.
All dated changes in this period
4 source records · 4 groupsSecurityVMware Workstation
VMSA-2023-0003:VMware Workstation update addresses an arbitrary file deletion vulnerability
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it high
SecurityExchange
Microsoft Exchange Server Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2022-41080
Assessment context
CISA deadline passed 1363 days ago
SecurityWindows
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2023-21674
Assessment context
CISA deadline passed 1363 days ago
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.