Several critical vulnerabilities have been announced recently, including:
- Multiple vulnerabilities in Progress Software's MOVEit Transfer web application:
- CVE-2023-34362
- CVE-2023-35036
- CVE-2023-35708
- A vulnerability in Barracuda Software’s email security gateway [CVE-2023-2868].
- A vulnerability in Fortinet’s FortiOS/FortiProxy [CVE-2023-27997].
Please refer to the resources below for information on these vulnerabilities, Bitsight’s research status, and updates with regards to data availability.
| Vulnerability ID | Status | Resource Center |
|---|---|---|
| CVE-2023-34362 | Vulnerability Detection now available. | MOVEit Transfer |
| CVE-2023-35036 | Under investigation. | |
| CVE-2023-35708 | Under investigation. | |
| CVE-2023-2868 | Resource center & under investigation. | Barracuda |
| CVE-2023-27997 | Resource center & under investigation. | FortiOS/FortiProxy |