CVEs published in November 2022
69 tracked CVEs from 6 vendors had their first vendor advisory published in November 2022: 3 critical, 51 high, 7 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2022-23746High
The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX).
Check Point · 1 advisory - Added
CVE-2022-42003High
FasterXML Jackson Databind Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2022-43680High
libexpat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2022-42004High
FasterXML Jackson Databind Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2022-23748HighCISA KEV
Dante Discovery Process Control Vulnerability
Check Point · 1 advisory - Added
CVE-2022-43782Critical
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application
Atlassian · 1 advisory - Added
CVE-2022-43781Critical
Bitbucket: There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center.
Atlassian · 1 advisory - Added
CVE-2022-3980Critical
Sophos Mobile: XML External Entity (XEE) vulnerability
Sophos · 1 advisory - Added
CVE-2022-41128HighCISA KEV
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41125HighCISA KEV
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41123High
Microsoft Exchange Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41122Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41118High
Windows Scripting Languages Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41116Medium
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41114High
Windows Bind Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41113High
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41109High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41103Medium
Microsoft Word Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41102High
Windows Overlay Filter Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41101High
Windows Overlay Filter Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41100High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41098Medium
Windows GDI+ Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41097Medium
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41096High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41095High
Windows Digital Media Receiver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41093High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41092High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41091MediumCISA KEV
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41090Medium
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41088High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41086Medium
Windows Group Policy Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41080HighCISA KEV
Microsoft Exchange Server Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41079High
Microsoft Exchange Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41078High
Microsoft Exchange Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41073HighCISA KEV
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41062High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41061High
Microsoft Word Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41060Medium
Microsoft Word Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41058High
Windows Network Address Translation (NAT) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41057High
Windows HTTP.sys Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41056High
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41055Medium
Windows Human Interface Device Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41054High
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41053High
Windows Kerberos Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41052High
Windows Graphics Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41050High
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41049MediumCISA KEV
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41048High
Microsoft ODBC Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41047High
Microsoft ODBC Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41045High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41044High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-41039High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-38023High
Netlogon RPC Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-38015Medium
Windows Hyper-V Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2022-37992High
Windows Group Policy Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-37967High
Windows Kerberos Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-37966High
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-43572High
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk (S2S) or…
Splunk · 1 advisory - Added
CVE-2022-43570High
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user
Splunk · 1 advisory - Added
CVE-2022-43569High
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts
Splunk · 1 advisory - Added
CVE-2022-43568High
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting
Splunk · 1 advisory - Added
CVE-2022-43567High
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user
Splunk · 1 advisory - Added
CVE-2022-43566High
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user
Splunk · 1 advisory - Added
CVE-2022-43565High
In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON)
Splunk · 1 advisory - Added
CVE-2022-43564Medium
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who
Splunk · 1 advisory - Added
CVE-2022-43563High
In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names
Splunk · 1 advisory - Added
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host…
Splunk · 1 advisory - Added
CVE-2022-43571High
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user
Splunk · 1 advisory - Added
CVE-2022-43561Medium
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role
Splunk · 1 advisory