Select Profile Benchmark
Top 5 Priorities for Financial Services Internal Gateway
1
HIGH
CVE-2023-46604
Remote Code Execution vulnerability in Apache ActiveMQ via OpenWire protocol
Why: The organisation uses activemq, which is affected by CVE-2023-46604. CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 95.8% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Action: Review the vendor advisory for CVE-2023-46604 and assess whether patching or compensating controls are appropriate for your environment. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-46604
2
LOW
CVE-2023-30533
Prototype pollution in sheetjs xlsx library allowing arbitrary property injec...
Why: The organisation uses xlsx, which is affected by CVE-2023-30533. The Exploit Prediction Scoring System (EPSS) estimates a 1.2% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Action: Review the vendor advisory for CVE-2023-30533 and assess whether patching or compensating controls are appropriate for your environment. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-30533
3
EXCLUDED
CVE-2023-22515
Privilege escalation vulnerability in Atlassian Confluence Data Center and Se...
Why: CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 97.1% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Action: Review CVE-2023-22515 and confirm whether confluence_data_center is in use.
4
EXCLUDED
CVE-2021-44228
Log4Shell: Unauthenticated Remote Code Execution via JNDI injection in Apache...
Why: CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 97.5% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Action: Review CVE-2021-44228 and confirm whether log4j is in use.
5
EXCLUDED
CVE-2020-1472
Zerologon: Unauthenticated privilege escalation vulnerability in Microsoft Ne...
Why: CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 97.5% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Action: Review CVE-2020-1472 and confirm whether netlogon is in use.
Excluded High-CVSS (Negative Test)
CVE-2023-22515
CVE-2023-22515 has a CVSS score of 10.0 but was excluded because the organisation does not use confluence_data_center. A high CVSS score alone does not make a vulnerability relevant.
CVE-2021-44228
CVE-2021-44228 has a CVSS score of 10.0 but was excluded because the organisation does not use log4j. A high CVSS score alone does not make a vulnerability relevant.
CVE-2020-1472
CVE-2020-1472 has a CVSS score of 10.0 but was excluded because the organisation does not use netlogon. A high CVSS score alone does not make a vulnerability relevant.
CVE-2023-20198
CVE-2023-20198 has a CVSS score of 10.0 but was excluded because the organisation does not use ios_xe. A high CVSS score alone does not make a vulnerability relevant.
CVE-2023-22527
CVE-2023-22527 has a CVSS score of 10.0 but was excluded because the organisation does not use confluence_data_center. A high CVSS score alone does not make a vulnerability relevant.