CVEs published in June 2022
15 tracked CVEs from 5 vendors had their first vendor advisory published in June 2022: 2 critical, 9 high, 2 in CISA KEV. Newest first.
3 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2022-26135Medium
vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined
Atlassian · 1 advisory - Added
CVE-2022-34305Unrated
XSS in examples web application
Apache · 1 advisory - Added
CVE-2022-30164High
Kerberos AppContainer Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2022-29143High
Microsoft SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-32158Critical
Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0
Splunk · 1 advisory - Added
CVE-2022-32157High
Splunk Enterprise: Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles.
Splunk · 1 advisory - Added
CVE-2022-32156High
Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
Splunk · 1 advisory - Added
CVE-2022-32155High
Universal Forwarder: In universal forwarder versions before 9.0, management services are available remotely by default.
Splunk · 1 advisory - Added
CVE-2022-32154Medium
Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token
Splunk · 1 advisory - Added
CVE-2022-32153High
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not…
Splunk · 1 advisory - Added
CVE-2022-32152High
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not…
Splunk · 1 advisory - Added
CVE-2022-32151High
The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the…
Splunk · 1 advisory - Added
CVE-2022-26134CriticalCISA KEV
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian · 1 advisory - Added
CVE-2022-30190HighCISA KEV
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-27780Unrated
https://github.com/curl/curl: The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`
NetApp · 1 advisory