Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

Feb 25, 2025

—

Source URL: https://www.cisa.gov/news-events/alerts/2025/02/25/cisa-adds-two-known-exploited-vulnerabilities-catalog
Source: Alerts
Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog

Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Users and administrators are also encouraged to review the Palo Alto Threat Brief: Operation Lunar Peek related to CVE-2024-0012, the Palo Alto Security Bulletin for CVE-2024-0012, and the Palo Alto Security Bulletin for CVE-2024-9474 for additional information.
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

AI Summary and Description: Yes

Summary: The text highlights recent updates from CISA regarding new vulnerabilities added to its Known Exploited Vulnerabilities Catalog, emphasizing the importance of timely remediation to protect against active cyber threats. It particularly focuses on two specific vulnerabilities exploited in different systems, reflecting the ongoing risk landscape for organizations.

Detailed Description: This announcement by CISA serves as a crucial update for security and compliance professionals focused on vulnerability management and threat mitigation in their organizations. With the inclusion of specific CVEs, it underscores the continuing rise in cyber threats and the need for proactive measures.

– **New Vulnerabilities**:
– CVE-2024-49035: Microsoft Partner Center Improper Access Control Vulnerability
– CVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
– **Threat Landscape**: These vulnerabilities represent frequent attack vectors for attackers and present significant risks to organizations, particularly within the federal enterprise.
– **CISA’s Binding Operational Directive (BOD) 22-01**:
– This directive mandates the identification and remediation of significant vulnerabilities that could lead to compromised federal networks.
– BOD 22-01 applies specifically to Federal Civilian Executive Branch (FCEB) agencies, while encouraging all organizations to adopt similar vigilance in their cybersecurity practices.
– **Vulnerability Management Best Practices**:
– Organizations are advised to incorporate the timely remediation of vulnerabilities listed in the catalog as a core component of their security protocols.
– Continuous updates to the Known Exploited Vulnerabilities Catalog signal the evolving nature of cyber threats, making ongoing monitoring essential.

In summary, the information presented by CISA serves as a vital resource for security professionals, highlighting the imperative to remain vigilant and proactive in identifying and addressing vulnerabilities in their systems to mitigate risk effectively.

01 1 2 2024 24 3 4 5 7 a access access control access control vulnerability Act active exploitation active threats administrators AGI AI alerts and art as attack attack vectors attackers attacks based Best best practices Binding Operational Directive by C catalog CIA CISA Col collaboration Common Vulnerabilities Common Vulnerabilities and Exposures compliance compliance professionals control core cross cross-site scripting cross-site scripting (XSS) CVE cyber cyber actors cyber threat cyber threats cyberattack Cyberattacks cybersecurit Cybersecurity cybersecurity practices D de directive e effective enterprise ERP event exp exploit Exploitation exploited vulnerabilities Exposures fact Federal Civilian Executive Branch federal enterprise Federal Networks focused for g Gen Go H high Highlight HR http HTTPS in Inclusion information ite k Known Exploited Vulnerabilities Known Exploited Vulnerabilities Catalog l Labor land led Li Living making malicious cyber actors man management media Micro Microsoft Mila mini mitigation Monitor monitoring network networks news NIST no o of on one operation opt organization organizations Palo Alto Palo Alto Threat Brief pre proactive proactive measures professionals protocol protocols R rag rate RCE red remediation resource Risk risks Ro RoT s sec security security and compliance security bulletin security practices security professionals security protocols Sig Signal Sim site scripting source specific SSE system systems T text the threat threat landscape threat mitigation threats Time to Tor TP two type UI up update updates US use user Users V vectors vigilance vulnerabilities vulnerabilities catalog vulnerability Vulnerability Management vulnerability management practice Wi x XSS Zimbra