Cyber alerts - NHS England Digital

Published Wednesday 13 December 2023 (10:51) (updated 13 December 2023)

Critical RCE Vulnerability in Atlassian Confluence Data Center and Confluence Server

Template injection vulnerability CVE-2023-22522 could lead to remote code execution

Published Tuesday 31 October 2023 (02:40) (updated 9 November 2023)

Atlassian Releases Security Updates for Critical Vulnerabilities in Confluence Data Center and Confluence Server

The security update addresses one improper authorisation vulnerability and one broken access control vulnerability in Confluence Data Center and Confluence Server

CC-4392 High

Published Thursday 26 October 2023 (02:46) (updated 26 October 2023)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Citrix has released critical security updates addressing one Critical and one High severity vulnerability in NetScaler ADC and NetScaler Gateway

CC-4395 High

Published Tuesday 17 October 2023 (04:50) (updated 17 October 2023)

Cisco Releases Security Advisory for Actively Exploited Vulnerability CVE-2023-20198

The security advisory addresses a critical privilege escalation vulnerability found in Cisco IOS XE Software Web UI

CC-4385 High

Published Friday 29 September 2023 (12:08) (updated 6 October 2023)

Progress Issues Security Update for Critical Vulnerabilities in WS_FTP Server

The security update contains two critical vulnerabilities, three high vulnerabilities and three medium vulnerabilities

CC-4362 High

Published Tuesday 25 July 2023 (01:43) (updated 25 July 2023)

Remote Unauthenticated API Access Vulnerability in Ivanti Endpoint Manager Mobile

Critical vulnerability could allow attackers to access user data or to make limited changes to servers

CC-4359 High

Published Tuesday 18 July 2023 (05:22) (updated 18 July 2023)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Citrix has released a critical security update addressing 1 Critical and 2 High severity vulnerabilities in NetScaler ADC and NetScaler Gateway

CC-4334 High

Published Tuesday 13 June 2023 (09:07) (updated 13 June 2023)

Critical FortiOS & FortiProxy pre-authentication heap-based buffer overflow vulnerability in SSL-VPN

CC-4306 High

Published Thursday 20 April 2023 (01:54) (updated 20 April 2023)

Active Exploitation of a Critical RCE Vulnerability in PaperCut MF/NG Servers

PaperCut has released a security update to address one Critical and one High severity vulnerability in PaperCut MF/NG

CC-4291 High

Published Thursday 30 March 2023 (01:05) (updated 3 April 2023)

Active Intrusion Campaign Targeting 3CX DesktopApp

Legitimate versions of 3CX DesktopApp have been compromised and are being actively exploited