组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| CVE-2022-2992 | 命令注入 | 严重 | 9.9 | 86.2% | PoC | ||
| CVE-2022-2884 | 远程代码执行 | 严重 | 9.9 | 75.7% | PoC | ||
| Fortinet - Authentication Bypass | 身份验证绕过 | 严重 | 9.8 | 100.0% | PoC | ||
| WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | 1.2% | PoC | ||
| Text4Shell - Remote Code Execution | 远程代码执行 | 严重 | 9.8 | 99.9% | PoC | ||
| RPCMS 3.0.2 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 1.1% | PoC | ||
| CVE-2022-40871 | 远程代码执行 | 严重 | 9.8 | 33.4% | PoC | ||
| Flatpress < v1.2.1 - Cross Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | 1.3% | PoC | ||
| Changjietong Remote Communication GNRemote.dll - SQL Injection | SQL注入 | 高危 | — | — | PoC | ||
| 锐捷EWEB网管系统-默认密码登录 | 弱口令 | 高危 | — | — | PoC | ||
| http 请求走私 | HTTP请求欺骗 | 高危 | — | — | PoC | ||
| FLIR-AX8 res.php 默认密码登录 | 弱口令 | 严重 | — | — | PoC | ||
| CVE-2022-41853 | 远程代码执行 | 严重 | 8.0 | 3.9% | PoC | ||
| esafenet-cdg-dataimport-rce | 远程代码执行 | 严重 | — | — | PoC | ||
| CVE-2022-41082 | 远程代码执行 | 高危 | 8.0 | 100.0% | PoC | ||
| Liferay Portal - Cross-site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 0.97% | PoC | ||
| OA E-Office OfficeServer.php Arbitrary File Upload | 远程代码执行 | 严重 | — | — | PoC | ||
| Tongda OA v11.9 getadata - Remote Code Execution | 远程代码执行 | 严重 | — | — | PoC | ||
| Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control | 未授权访问 | 高危 | 7.5 | 3.9% | PoC | ||
| F5 BIG-IP Appliance Mode - Command Injection | 命令注入 | 高危 | 8.7 | 76.9% | PoC |