<\/p>\n
Highlights of Patch Watch Issue 5<\/strong><\/span><\/span><\/u><\/p>\n\nOracle rolls out 402 security updates including 82 critical bugs.<\/strong><\/a><\/span><\/span><\/li>\nAdobe, Dell, Check Point, Palo Alto, FortiGuard, NetApp, RedHat, <\/strong><\/a>Siemens<\/strong><\/a>, VMware, HP, Oracle has published patches for 664 vulnerabilities (22 vulnerabilities are weaponized previously)<\/strong><\/a><\/span><\/span><\/li>\nCISA\u00a0has issued alerts for 10 CVE\u2019s.<\/strong><\/a><\/span><\/span><\/li>\n199 old vulnerabiliites have been fixed.\u00a0<\/a><\/strong><\/span><\/span><\/li>\n<\/ul>\n\n<\/a>Oracle killed 402<\/strong> bugs by releasing this year\u2019s final batch of security updates.<\/span><\/span><\/li>\n<\/ol>\n<\/span><\/span><\/p>\n\n272<\/strong> vulnerabilities are remotely exploitable flaws with no authentication.<\/span><\/span><\/li>\n82 <\/strong>vulnerabilities have critical severity, in which two CVEs rank with\u00a0CVSS V3 score of 10<\/strong>.<\/strong><\/span><\/span><\/li>\n65 <\/strong>CVEs have CVSS V3 score between 9.4 and 9.8.<\/strong><\/span><\/span><\/li>\nIn the quarterly patch bundle, oracle has released two advisories: a\u00a0new one<\/a>\u00a0which details patches for security gaps in third-party components that are not exploitable as implemented in Oracle products and the\u00a0traditional advisory<\/a>.<\/span><\/span><\/li>\n<\/ul>\n\n<\/a>Our findings on 664<\/strong> patched vulnerabilities reveal –<\/span><\/span><\/li>\n<\/ol>\n\n7<\/strong> Hotfixes, 417<\/strong> Patches and, 240 <\/strong>Updates in this week<\/span><\/span><\/li>\n641 <\/strong>vulnerabilities are yet to be weaponized.<\/span><\/span><\/li>\n22<\/strong> vulnerabilities have known exploits and are weaponized.<\/span><\/span><\/li>\nExploited vulnerabilities are associated with Remote Code Evaluation (RCE<\/strong>), WEB APP exploits, <\/strong>DoS\/RCE, <\/strong>Privilege Execution, <\/strong>Denial of Service, and\u00a0 <\/strong>LOCAL Exploits.<\/strong><\/span><\/span><\/li>\n<\/ul>\n<\/strong><\/span><\/span><\/p>\n\n<\/a>Furthermore, we have 199 old vulnerabilities ranging from 2015 to 2019 with 43 CVEs critical and 31 with high severity rating.<\/span><\/span><\/li>\n<\/ol>\n<\/span><\/span><\/p>\n<\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"CISA\" name=\"CISA\"><\/a>CISA<\/strong>\u00a0has published alerts and security advisory for <strong>10 CVE\u2019s <\/strong>containing all the technical details and mitigations.<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><img decoding=\"async\" style=\"width: 734px; height: 440px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendor-analysis-cisa.png\" alt=\"\" \/><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrcO1yZFPtmvl6E5?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA\u00a0Alerts<\/strong><\/span><\/span><\/p>\n<ol start=\"5\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The following CVEs have been issued security patches and updates for the second time in the same month. Know more about the previous updates –<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 3 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-5422<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-15095<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-25220, and CVE-2019-17638<\/a><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 4 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-14-csw-patch-watch-security-updates.html\">CVE-2020-24750, CVE-2020-8201, CVE-2020-8252, CVE-2020-1728, CVE-2019-19242, CVE-2020-11023, and CVE-2020-11022<\/a><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Fixing weaponized vulnerabilities is essential as these vulnerabiliites have many known exploits and can be exploited easily.<\/span><\/span><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrXHXuxUUmtfdzYn?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Based on a <a href=\"https:\/\/www.securitymagazine.com\/articles\/93183-number-of-vulnerabilities-disclosed-in-the-first-half-of-2020-decreased-by-82\">security survey<\/a>, <strong>11,121<\/strong> vulnerabilities has been disclosed in first half of this year in which Microsoft and Oracle are responsible for 818 vulnerabilities.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrct3PK2EaFcdi0g?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4\u00a0Vulnerabilities yet to Be Weaponized<\/strong><\/span><\/span><\/p>\n<p> <\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Threat actors this year have consistently gone after old vulnerabilities to deliver ransomware and malware infections which makes patching\u00a0optimal to cyber hygiene. <\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching!<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Highlights of Patch Watch Issue 5 Oracle rolls out 402 security updates including 82 critical bugs. Adobe, Dell, Check Point, Palo Alto, FortiGuard, NetApp, RedHat, Siemens, VMware, HP, Oracle has published patches for 664 vulnerabilities (22 vulnerabilities are weaponized previously) CISA\u00a0has issued alerts for 10 CVE\u2019s. 199 old vulnerabiliites have been fixed.\u00a0 Oracle killed […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8780"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8780"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/span><\/span><\/p>\n\n272<\/strong> vulnerabilities are remotely exploitable flaws with no authentication.<\/span><\/span><\/li>\n82 <\/strong>vulnerabilities have critical severity, in which two CVEs rank with\u00a0CVSS V3 score of 10<\/strong>.<\/strong><\/span><\/span><\/li>\n65 <\/strong>CVEs have CVSS V3 score between 9.4 and 9.8.<\/strong><\/span><\/span><\/li>\nIn the quarterly patch bundle, oracle has released two advisories: a\u00a0new one<\/a>\u00a0which details patches for security gaps in third-party components that are not exploitable as implemented in Oracle products and the\u00a0traditional advisory<\/a>.<\/span><\/span><\/li>\n<\/ul>\n\n<\/a>Our findings on 664<\/strong> patched vulnerabilities reveal –<\/span><\/span><\/li>\n<\/ol>\n\n7<\/strong> Hotfixes, 417<\/strong> Patches and, 240 <\/strong>Updates in this week<\/span><\/span><\/li>\n641 <\/strong>vulnerabilities are yet to be weaponized.<\/span><\/span><\/li>\n22<\/strong> vulnerabilities have known exploits and are weaponized.<\/span><\/span><\/li>\nExploited vulnerabilities are associated with Remote Code Evaluation (RCE<\/strong>), WEB APP exploits, <\/strong>DoS\/RCE, <\/strong>Privilege Execution, <\/strong>Denial of Service, and\u00a0 <\/strong>LOCAL Exploits.<\/strong><\/span><\/span><\/li>\n<\/ul>\n<\/strong><\/span><\/span><\/p>\n\n<\/a>Furthermore, we have 199 old vulnerabilities ranging from 2015 to 2019 with 43 CVEs critical and 31 with high severity rating.<\/span><\/span><\/li>\n<\/ol>\n<\/span><\/span><\/p>\n<\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"CISA\" name=\"CISA\"><\/a>CISA<\/strong>\u00a0has published alerts and security advisory for <strong>10 CVE\u2019s <\/strong>containing all the technical details and mitigations.<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><img decoding=\"async\" style=\"width: 734px; height: 440px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendor-analysis-cisa.png\" alt=\"\" \/><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrcO1yZFPtmvl6E5?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA\u00a0Alerts<\/strong><\/span><\/span><\/p>\n<ol start=\"5\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The following CVEs have been issued security patches and updates for the second time in the same month. Know more about the previous updates –<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 3 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-5422<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-15095<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-25220, and CVE-2019-17638<\/a><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 4 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-14-csw-patch-watch-security-updates.html\">CVE-2020-24750, CVE-2020-8201, CVE-2020-8252, CVE-2020-1728, CVE-2019-19242, CVE-2020-11023, and CVE-2020-11022<\/a><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Fixing weaponized vulnerabilities is essential as these vulnerabiliites have many known exploits and can be exploited easily.<\/span><\/span><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrXHXuxUUmtfdzYn?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Based on a <a href=\"https:\/\/www.securitymagazine.com\/articles\/93183-number-of-vulnerabilities-disclosed-in-the-first-half-of-2020-decreased-by-82\">security survey<\/a>, <strong>11,121<\/strong> vulnerabilities has been disclosed in first half of this year in which Microsoft and Oracle are responsible for 818 vulnerabilities.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrct3PK2EaFcdi0g?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4\u00a0Vulnerabilities yet to Be Weaponized<\/strong><\/span><\/span><\/p>\n<p> <\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Threat actors this year have consistently gone after old vulnerabilities to deliver ransomware and malware infections which makes patching\u00a0optimal to cyber hygiene. <\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching!<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Highlights of Patch Watch Issue 5 Oracle rolls out 402 security updates including 82 critical bugs. Adobe, Dell, Check Point, Palo Alto, FortiGuard, NetApp, RedHat, Siemens, VMware, HP, Oracle has published patches for 664 vulnerabilities (22 vulnerabilities are weaponized previously) CISA\u00a0has issued alerts for 10 CVE\u2019s. 199 old vulnerabiliites have been fixed.\u00a0 Oracle killed […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8780"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8780"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/strong><\/span><\/span><\/p>\n\n<\/a>Furthermore, we have 199 old vulnerabilities ranging from 2015 to 2019 with 43 CVEs critical and 31 with high severity rating.<\/span><\/span><\/li>\n<\/ol>\n<\/span><\/span><\/p>\n<\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"CISA\" name=\"CISA\"><\/a>CISA<\/strong>\u00a0has published alerts and security advisory for <strong>10 CVE\u2019s <\/strong>containing all the technical details and mitigations.<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><img decoding=\"async\" style=\"width: 734px; height: 440px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendor-analysis-cisa.png\" alt=\"\" \/><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrcO1yZFPtmvl6E5?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA\u00a0Alerts<\/strong><\/span><\/span><\/p>\n<ol start=\"5\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The following CVEs have been issued security patches and updates for the second time in the same month. Know more about the previous updates –<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 3 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-5422<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-15095<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-25220, and CVE-2019-17638<\/a><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 4 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-14-csw-patch-watch-security-updates.html\">CVE-2020-24750, CVE-2020-8201, CVE-2020-8252, CVE-2020-1728, CVE-2019-19242, CVE-2020-11023, and CVE-2020-11022<\/a><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Fixing weaponized vulnerabilities is essential as these vulnerabiliites have many known exploits and can be exploited easily.<\/span><\/span><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrXHXuxUUmtfdzYn?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Based on a <a href=\"https:\/\/www.securitymagazine.com\/articles\/93183-number-of-vulnerabilities-disclosed-in-the-first-half-of-2020-decreased-by-82\">security survey<\/a>, <strong>11,121<\/strong> vulnerabilities has been disclosed in first half of this year in which Microsoft and Oracle are responsible for 818 vulnerabilities.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrct3PK2EaFcdi0g?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4\u00a0Vulnerabilities yet to Be Weaponized<\/strong><\/span><\/span><\/p>\n<p> <\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Threat actors this year have consistently gone after old vulnerabilities to deliver ransomware and malware infections which makes patching\u00a0optimal to cyber hygiene. <\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching!<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Highlights of Patch Watch Issue 5 Oracle rolls out 402 security updates including 82 critical bugs. Adobe, Dell, Check Point, Palo Alto, FortiGuard, NetApp, RedHat, Siemens, VMware, HP, Oracle has published patches for 664 vulnerabilities (22 vulnerabilities are weaponized previously) CISA\u00a0has issued alerts for 10 CVE\u2019s. 199 old vulnerabiliites have been fixed.\u00a0 Oracle killed […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8780"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8780"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/span><\/span><\/p>\n<\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"CISA\" name=\"CISA\"><\/a>CISA<\/strong>\u00a0has published alerts and security advisory for <strong>10 CVE\u2019s <\/strong>containing all the technical details and mitigations.<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><img decoding=\"async\" style=\"width: 734px; height: 440px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendor-analysis-cisa.png\" alt=\"\" \/><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrcO1yZFPtmvl6E5?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA\u00a0Alerts<\/strong><\/span><\/span><\/p>\n<ol start=\"5\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The following CVEs have been issued security patches and updates for the second time in the same month. Know more about the previous updates –<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 3 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-5422<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-15095<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-25220, and CVE-2019-17638<\/a><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 4 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-14-csw-patch-watch-security-updates.html\">CVE-2020-24750, CVE-2020-8201, CVE-2020-8252, CVE-2020-1728, CVE-2019-19242, CVE-2020-11023, and CVE-2020-11022<\/a><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Fixing weaponized vulnerabilities is essential as these vulnerabiliites have many known exploits and can be exploited easily.<\/span><\/span><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrXHXuxUUmtfdzYn?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Based on a <a href=\"https:\/\/www.securitymagazine.com\/articles\/93183-number-of-vulnerabilities-disclosed-in-the-first-half-of-2020-decreased-by-82\">security survey<\/a>, <strong>11,121<\/strong> vulnerabilities has been disclosed in first half of this year in which Microsoft and Oracle are responsible for 818 vulnerabilities.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrct3PK2EaFcdi0g?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4\u00a0Vulnerabilities yet to Be Weaponized<\/strong><\/span><\/span><\/p>\n<p> <\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Threat actors this year have consistently gone after old vulnerabilities to deliver ransomware and malware infections which makes patching\u00a0optimal to cyber hygiene. <\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching!<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Highlights of Patch Watch Issue 5 Oracle rolls out 402 security updates including 82 critical bugs. Adobe, Dell, Check Point, Palo Alto, FortiGuard, NetApp, RedHat, Siemens, VMware, HP, Oracle has published patches for 664 vulnerabilities (22 vulnerabilities are weaponized previously) CISA\u00a0has issued alerts for 10 CVE\u2019s. 199 old vulnerabiliites have been fixed.\u00a0 Oracle killed […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8780"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8780"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"CISA\" name=\"CISA\"><\/a>CISA<\/strong>\u00a0has published alerts and security advisory for <strong>10 CVE\u2019s <\/strong>containing all the technical details and mitigations.<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><img decoding=\"async\" style=\"width: 734px; height: 440px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendor-analysis-cisa.png\" alt=\"\" \/><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrcO1yZFPtmvl6E5?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA\u00a0Alerts<\/strong><\/span><\/span><\/p>\n<ol start=\"5\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The following CVEs have been issued security patches and updates for the second time in the same month. Know more about the previous updates –<\/span><\/span><\/li>\n<\/ol>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 3 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-5422<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-15095<\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">, <\/a><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-7-csw-patch-watch-security-updates.html\">CVE-2020-25220, and CVE-2019-17638<\/a><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Patch Watch Issue 4 CVEs<\/strong><\/span><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"https:\/\/cybersecurityworks.com\/blog\/csw-patch-watch\/oct-14-csw-patch-watch-security-updates.html\">CVE-2020-24750, CVE-2020-8201, CVE-2020-8252, CVE-2020-1728, CVE-2019-19242, CVE-2020-11023, and CVE-2020-11022<\/a><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Fixing weaponized vulnerabilities is essential as these vulnerabiliites have many known exploits and can be exploited easily.<\/span><\/span><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrXHXuxUUmtfdzYn?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><span style=\"font-size: 12px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Based on a <a href=\"https:\/\/www.securitymagazine.com\/articles\/93183-number-of-vulnerabilities-disclosed-in-the-first-half-of-2020-decreased-by-82\">security survey<\/a>, <strong>11,121<\/strong> vulnerabilities has been disclosed in first half of this year in which Microsoft and Oracle are responsible for 818 vulnerabilities.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrct3PK2EaFcdi0g?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p style=\"margin-left: 40px;\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4\u00a0Vulnerabilities yet to Be Weaponized<\/strong><\/span><\/span><\/p>\n<p> <\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Threat actors this year have consistently gone after old vulnerabilities to deliver ransomware and malware infections which makes patching\u00a0optimal to cyber hygiene. <\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching!<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Highlights of Patch Watch Issue 5 Oracle rolls out 402 security updates including 82 critical bugs. Adobe, Dell, Check Point, Palo Alto, FortiGuard, NetApp, RedHat, Siemens, VMware, HP, Oracle has published patches for 664 vulnerabilities (22 vulnerabilities are weaponized previously) CISA\u00a0has issued alerts for 10 CVE\u2019s. 199 old vulnerabiliites have been fixed.\u00a0 Oracle killed […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8780"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8780"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"\/wp-content\/uploads\/2022\/10\/patchwatch-highlights2-corrected2.png\")
<\/p>\n<\/p>\n![\"\"](\"\/wp-content\/uploads\/2022\/10\/oracle-october-patch.png\")
<\/span><\/span><\/p>\n![\"\"](\"\/wp-content\/uploads\/2022\/10\/in-a-total-of-664-vulnerabilities.png\")
<\/strong><\/span><\/span><\/p>\n![\"\"](\"\/wp-content\/uploads\/2022\/10\/old-vulnerabilities-5.png\")
<\/span><\/span><\/p>\n