CVEs published in February 2023
85 tracked CVEs from 8 vendors had their first vendor advisory published in February 2023: 7 critical, 58 high, 3 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2023-24104Critical
UniFi: Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.
Ubiquiti · 1 advisory - Added
CVE-2022-42898High
MIT Kerberos 5 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-24998Unrated
Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts
Apache · 1 advisory - Added
CVE-2022-42472Medium
improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet FortiOS 7.2.0 through 7.2.2, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0.0 through 2.0.10, FortiProxy 1.2 all versions, FortiProxy 01.02 all versions, FortiProxy 1.1 all versions, FortiProxy 01.01 all versions may allow an authenticated and remote attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body of the response
Fortinet · 1 advisory - Added
CVE-2023-21823HighCISA KEV
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2023-23376HighCISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21717High
Microsoft SharePoint Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21716Critical
Microsoft Word Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21713High
Microsoft SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21710High
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21702High
Windows iSCSI Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21701High
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21700High
Windows iSCSI Discovery Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21699Medium
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21697Medium
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21695High
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21694Medium
Windows Fax Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21693Medium
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21692Critical
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21691High
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21690Critical
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21689Critical
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21688High
NT OS Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21687Medium
HTTP.sys Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21686High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21685High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21822High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21820High
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21819High
Windows Secure Channel Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21818High
Windows Secure Channel Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21817High
Windows Kerberos Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21816High
Windows Active Directory Domain Services API Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21813High
Windows Secure Channel Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21812High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21811High
Windows iSCSI Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21805High
Windows MSHTML Platform Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21804High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21803Critical
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21802High
Windows Media Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21801High
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21800High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21799High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21798High
Microsoft ODBC Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21797High
Microsoft ODBC Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21529HighCISA KEV
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21568High
Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21718High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21707High
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21706High
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21705High
Microsoft SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21704High
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21684High
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-21528High
Microsoft SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-22943Medium
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to…
Splunk · 1 advisory - Added
CVE-2023-22942Medium
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a cross-site request forgery in the Splunk Secure Gateway (SSG)…
Splunk · 1 advisory - Added
CVE-2023-22941Medium
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field…
Splunk · 1 advisory - Added
CVE-2023-22940Medium
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL)…
Splunk · 1 advisory - Added
CVE-2023-22939High
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command
Splunk · 1 advisory - Added
CVE-2023-22938Medium
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint
Splunk · 1 advisory - Added
CVE-2023-22937Medium
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature
Splunk · 1 advisory - Added
CVE-2023-22936Medium
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search
Splunk · 1 advisory - Added
CVE-2023-22935High
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter
Splunk · 1 advisory - Added
CVE-2023-22934High
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command
Splunk · 1 advisory - Added
CVE-2023-22933High
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View
Splunk · 1 advisory - Added
CVE-2023-22932High
In Splunk Enterprise 9.0 versions before 9.0.4, a View
Splunk · 1 advisory - Added
CVE-2023-22931Medium
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource…
Splunk · 1 advisory - Added
CVE-2023-23119Medium
The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X…
Ubiquiti · 1 advisory - Added
CVE-2023-22501Critical
authentication vulnerability was discovered in Jira Service Management Server and Data Center which
Atlassian · 1 advisory - Added
CVE-2023-23555High
On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3…
F5 · 1 advisory - Added
CVE-2023-23552High
BIG-IP: On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of…
F5 · 1 advisory - Added
CVE-2023-22842High
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x
F5 · 1 advisory - Added
CVE-2023-22839High
On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all…
F5 · 1 advisory - Added
CVE-2023-22664High
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0
F5 · 1 advisory - Added
CVE-2023-22657High
On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS…
F5 · 1 advisory - Added
CVE-2023-22422High
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3
F5 · 1 advisory - Added
CVE-2023-22418Medium
BIG-IP: On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.7, 14.1.x before 14.1.5.3, and all versions of…
F5 · 1 advisory - Added
CVE-2023-22374High
BIG-IP: format string vulnerability exists in iControl SOAP
F5 · 1 advisory - Added
CVE-2023-22358High
In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows…
F5 · 1 advisory - Added
CVE-2023-22341High
BIG-IP: On version 14.1.x before 14.1.5.3, and all versions of 13.1.x
F5 · 1 advisory - Added
CVE-2023-22340High
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x
F5 · 1 advisory - Added
CVE-2023-22326Medium
In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all…
F5 · 1 advisory - Added
CVE-2023-22323High
In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all…
F5 · 1 advisory - Added
CVE-2023-22302Medium
In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3
F5 · 1 advisory - Added
CVE-2023-22283Medium
On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows
F5 · 1 advisory - Added
CVE-2023-22281High
BIG-IP: On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of…
F5 · 1 advisory