Het CSIRT-DSP maakt op wekelijkse basis een selectie van kwetsbaarheden, waarbij het CSIRT-DSP de inschatting heeft gemaakt dat deze relevant zijn voor digitale dienstverleners.
Het betreft een selectie van 'Medium' en 'High' kwetsbaarheden. Voor de inschatting hiervan wordt er gebruik gemaakt van de CVSS 3.1 base scores indien deze beschikbaar zijn. Indien deze niet beschikbaar zijn, zal dit worden aangegeven met 'n/a'.
Critical & High
Zyxel ATP / USG FLEX / USG FLEX50(W) / USG20(W)-VPN / VPN / ZyWALL/USG
https://www.zyxel.com/global/en/support/security-advisories/zyxel-secur… (9.8)
Barracuda Email Security Gateway
https://nvd.nist.gov/vuln/detail/CVE-2023-2868 (9.4)
Netbox
https://nvd.nist.gov/vuln/detail/CVE-2023-33796 (9.1)
https://nvd.nist.gov/vuln/detail/CVE-2023-33785 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33786 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33787 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33788 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33789 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33790 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33791 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33792 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33793 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33794 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33795 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33797 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33798 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33799 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-33800 (5.4)
Dell NetWorker
https://nvd.nist.gov/vuln/detail/CVE-2023-25539 (8.4)
https://nvd.nist.gov/vuln/detail/CVE-2023-24568 (7.4)
Nextcloud Server / Server Enterprise
https://nvd.nist.gov/vuln/detail/CVE-2023-32319 (8.1)
https://nvd.nist.gov/vuln/detail/CVE-2023-32318 (7.2)
GitLab CE/EE
https://nvd.nist.gov/vuln/detail/CVE-2023-2825 (7.5)
OX App Suite
https://documentation.open-xchange.com/security/advisories/html/oxas-ad… (7.1-4.2)
Cloud Foundry Routing / CF Deployment
https://nvd.nist.gov/vuln/detail/CVE-2023-20882 (high)
Zimbra Collaboration Suite
https://www.ncsc.nl/actueel/advisory?id=NCSC-2023-0262 (high)
Medium
Kubernetes
https://groups.google.com/g/kubernetes-security-announce/c/5K8ghQHBDdQ (6.5)
VMware Workspace ONE Access (Access) / Identity Manager (vIDM) / Cloud Foundation
https://nvd.nist.gov/vuln/detail/CVE-2023-20884 (6.1)
FlexiHub
https://nvd.nist.gov/vuln/detail/CVE-2023-2872 (5.5)
NetApp BlueXP Connector
https://nvd.nist.gov/vuln/detail/CVE-2023-27311 (5.3)
OpenLDAP
https://nvd.nist.gov/vuln/detail/CVE-2023-2953 5.3)
Kyverno
https://nvd.nist.gov/vuln/detail/CVE-2023-33191 (4.6)
Atlassian Confluence Server
https://nvd.nist.gov/vuln/detail/CVE-2023-22504 (4.3)
MinIO Console
https://nvd.nist.gov/vuln/detail/CVE-2023-33955 (4.3)
OpenSSL
https://nvd.nist.gov/vuln/detail/CVE-2023-2650 (medium)