组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| Adobe AEM CRX Search Exposed | 信息泄露 | 未知 | — | — | PoC | ||
| AEM Package Manager - Authentication Bypass | 身份验证绕过 | 严重 | — | — | PoC | ||
| Adobe AEM CRX Browser Exposure | 信息泄露 | 未知 | — | — | PoC | ||
| Adobe Experience Manager Childlist Selector - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | — | PoC | ||
| AEM BulkEditor | 安全配置错误 | 未知 | — | — | PoC | ||
| AEM BG-Servlets | 安全配置错误 | 低危 | — | — | PoC | ||
| Adobe Connect Central Version | 安全配置错误 | 低危 | — | — | PoC | ||
| XSS-Protection Header - Cross-Site Scripting | 跨站脚本攻击 | 低危 | 0.0 | — | PoC | ||
| Webalizer Statistics Information Disclosure | 信息泄露 | 低危 | — | — | PoC | ||
| Vercel Source Code Exposure | 信息泄露 | 中危 | — | — | PoC | ||
| Zipkin Discovery | 未授权访问 | 高危 | — | — | PoC | ||
| Varnish Unauthenticated Cache Purge | 安全配置错误 | 低危 | — | — | PoC | ||
| Tensorflow Tensorboard - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC | ||
| Glowroot Anonymous User | 未授权访问 | 高危 | — | — | PoC | ||
| Alert Manager - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC | ||
| RedisInsight - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC | ||
| Unauthenticated Etherpad | 未授权访问 | 低危 | — | — | PoC | ||
| Typo3 composer.json Exposure | 信息泄露 | 低危 | — | — | PoC | ||
| TeslaMate - Unauthenticated Access | 未授权访问 | 中危 | — | — | PoC | ||
| SSRF due to misconfiguration in OAuth | 服务端请求伪造 | 中危 | — | — | PoC |