组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| Jira Unauthenticated Access to screens | 未授权访问 | 低危 | — | — | PoC | ||
| Jira Unauthenticated Resolutions | 未分类 | 低危 | — | — | PoC | ||
| Jira Unauthenticated Projects | 未分类 | 低危 | — | — | PoC | ||
| Jira Unauthenticated Project Categories | 未分类 | 低危 | — | — | PoC | ||
| Jira Unauthenticated Installed gadgets | 信息泄露 | 低危 | — | — | PoC | ||
| Jira Unauthenticated Dashboards | 未分类 | 低危 | — | — | PoC | ||
| Jira Unauthenticated Admin Projects | 未分类 | 低危 | — | — | PoC | ||
| Jinhe OA C6 download.jsp - Arbitary File Read | 文件包含 | 高危 | — | — | PoC | ||
| Jenkins - Remote Code Execution | 远程代码执行 | 严重 | 10.0 | — | PoC | ||
| IBM Eclipse Help System - Cross-Site Scripting | 跨站脚本攻击 | 高危 | 7.2 | — | PoC | ||
| Huawei HG255s - Local File Inclusion | 文件包含 | 高危 | 7.5 | — | PoC | ||
| Hikvision iVMS-8700 - File Upload Remote Code Execution | 远程代码执行 | 严重 | — | — | PoC | ||
| Hikvison iVMS - File Upload Bypass | 文件上传 | 严重 | — | — | PoC | ||
| Gnuboard 5 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | — | PoC | ||
| OOB Request Based Interaction | 服务端请求伪造 | 低危 | — | — | PoC | ||
| Host Header Injection | HTML注入 | 低危 | — | — | PoC | ||
| CORS Misconfiguration | 安全配置错误 | 低危 | — | — | PoC | ||
| FineReport 8.0 - Local File Inclusion | 文件包含 | 高危 | 7.5 | — | PoC | ||
| Discuz! X2.5 - Path Disclosure | 路径穿越 | 低危 | — | — | PoC | ||
RCE DedeCMS 5.8.1-beta - Remote Code Execution | 远程代码执行 | 严重 | — | — | PoC |