Cyber alerts - NHS England Digital

Published Thursday 26 October 2023 (01:33) (updated 26 October 2023)

VMware Releases Security Updates for VMware Aria Operations for Logs and Cloud Foundation

Security updates address two high vulnerabilities affecting VMware Aria Operations for Logs and Cloud Foundation

Published Thursday 26 October 2023 (02:46) (updated 26 October 2023)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Citrix has released critical security updates addressing one Critical and one High severity vulnerability in NetScaler ADC and NetScaler Gateway

CC-4399 Medium

Published Friday 27 October 2023 (01:37) (updated 1 November 2023)

F5 Releases Security Update for Critical Vulnerability in BIG-IP

Security update addresses critical remote code execution (RCE) vulnerability in BIG-IP

CC-4401 High

Published Tuesday 31 October 2023 (02:40) (updated 9 November 2023)

Atlassian Releases Security Updates for Critical Vulnerabilities in Confluence Data Center and Confluence Server

The security update addresses one improper authorisation vulnerability and one broken access control vulnerability in Confluence Data Center and Confluence Server

CC-4345 Medium

Published Thursday 22 June 2023 (03:34) (updated 26 October 2023)

Apple Releases Security Updates for Multiple Products

The released security updates include three exploited zero-day vulnerabilities in iOS, iPadOS, Safari, watchOS, and macOS

CC-4402 Medium

Published Wednesday 1 November 2023 (02:40) (updated 1 November 2023)

F5 Releases Security Update for Vulnerability in BIG-IP

Security update addresses an SQL injection vulnerability in BIG-IP

CC-4403 Medium

Published Thursday 2 November 2023 (04:11) (updated 2 November 2023)

Cisco Releases Security Updates for Multiple Products

Updates address one critical severity vulnerability in Cisco Firepower Management Center Software in addition to 21 other vulnerabilities

CC-4405 Medium

Published Tuesday 7 November 2023 (02:27) (updated 7 November 2023)

Veeam Releases Security Advisory

The security advisory addresses two critical and two medium vulnerabilities affecting Veeam ONE

CC-4406 Medium

Published Thursday 9 November 2023 (01:27) (updated 9 November 2023)

SysAid Releases Security Advisory for Actively Exploited Vulnerability CVE-2023-47246

An exploited zero-day vulnerability which could allow code execution has been discovered affecting SysAid on-prem software

CC-4404 Medium

Published Friday 3 November 2023 (11:13) (updated 10 November 2023)

Apache ActiveMQ RCE Vulnerability CVE-2023-46604

A Critical vulnerability that could allow a remote attacker with network access to a broker to run arbitrary shell commands