EXPOSURES › CVE-2022-29464

CVE-2022-29464

CRITICAL ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-04-25 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-29464 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 95/100 ransomwarerceexploited-in-wild

WSO2 products have a critical vulnerability allowing unrestricted file uploads and remote code execution, actively exploited in ransomware attacks.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

DESCRIPTION

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.