CVE-2022-22965

CVE-2022-22965 (Spring4Shell) affects Spring Framework’s Spring MVC and Spring WebFlux when data binding is enabled in apps running on JDK 9+, with exploitation requiring Tomcat as WAR deployment. The issue is not exploited in Spring Boot executable jars. Vulnerable configurations are associated ...

CVE-2023-20043

The CVE-2023-20043 entry concerns Cisco CX Cloud Agent. Affected component: Cisco CX Cloud Agent. Root cause: insecure file permissions allowing a locally authenticated attacker to elevate privileges by executing a script with sudo, potentially gaining full control of the device. Documented impac...

CVE-2023-20044

Cisco CX Cloud Agent contains a privilege-escalation vulnerability caused by insecure file permissions. An authenticated, local attacker could exploit settings persuaded by support to call insecure scripts, potentially taking full control of the affected device. Cisco has issued advisories and so...