Is CVE-2022-0995 known to be exploited?

It is not marked known-exploited in this record.

CVE-2022-0995

Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.

Quick answers

What is CVE-2022-0995?: Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.
How severe is CVE-2022-0995?: critical
Is CVE-2022-0995 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2022-0995 be mitigated?: Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.

CISA Adds Six Actively Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation in the wild. The newly listed flaws affect Red Hat libuser and Automatic Bug Reporting Tool, Microsoft SQL Server, Ajax.NET Professional, the Linux kernel, and Citrix NetScaler ADC and Gateway products. CISA's Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize rapid remediation of these KEV-listed vulnerabilities on publicly exposed assets, particularly those that grant total control post-exploitation.

—2m

CVE-2022-0995

Quick answers

Related News

CISA Adds Six Actively Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog