组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution | 严重 | — | — | PoCEXP | ||
| CVE-2024-31138 | 中危 | 4.6 | 87.8% | PoCEXP | ||
| TeamCity < 2023.11.4 - Authentication Bypass | 高危 | 7.3 | 94.5% | PoCEXP | ||
| TeamCity < 2023.11.4 - Authentication Bypass | 严重 | 9.8 | 94.6% | PoCEXP | ||
| JetBrains TeamCity > 2023.11.3 - Authentication Bypass | 严重 | 9.8 | 94.4% | PoCEXP | ||
| JetBrains TeamCity - Registration Enabled | 高危 | 7.3 | — | PoCEXP | ||
| JetBrains TeamCity - Guest User Access Enabled | 高危 | 7.3 | — | PoCEXP | ||
| JetBrains TeamCity < 2023.05.4 - Remote Code Execution | 严重 | 9.8 | 94.6% | PoCEXP | ||
| CVE-2023-41249 | 中危 | 4.6 | 87.3% | PoCEXP | ||
| CVE-2023-34225 | 中危 | 4.6 | 7.7% | PoCEXP | ||
| CVE-2023-34220 | 中危 | 4.6 | 5.8% | PoCEXP | ||
| Jetbrains Takeover Detection | 高危 | — | — | PoCEXP |