{"id":8375,"date":"2022-06-10T11:13:02","date_gmt":"2022-06-10T18:13:02","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8375"},"modified":"2023-03-03T14:40:42","modified_gmt":"2023-03-03T21:40:42","slug":"dhs-cisa-kevs-weekly-edition-6-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/dhs-cisa-kevs-weekly-edition-6-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 6: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">On June 8, 2022, the US Cybersecurity and Infrastructure Security Agency (CISA) has added 36 new vulnerabilities, bringing the total number of exploited bugs to 777.<\/p>\n<p dir=\"ltr\">This blog lists all of the DHS CISA KEVs that need to be patched this week (June 1 to June 12, 2022).<\/p>\n<p dir=\"ltr\">The federal agencies are expected to patch 14 known exploited vulnerabilities in the DHS CISA catalog this week in time for the June 1 to June 12, 2022 deadline. Based on our analysis of these\u00a0 KEVs, we found that &#8211;<\/p>\n<p><img decoding=\"async\" style=\"width: 800px; height: 395px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kev-1-2.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Of the 14 KEVs, 11 CVEs are old vulnerabilities dating from 2010 to 2021, with a patch deadline of June 1 to June 12, 2022.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 328px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kev-5.png\" alt=\"\" \/><\/p>\n<h2>Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">These 14 CVEs that have a patch deadline of June 1 to June 12, 2022, affect 13 vendors such as Apache, Atlassian, RedHat, Vmware, and Linux.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 470px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kev-4.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 462px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kev-2.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p dir=\"ltr\">10 out of the 14 KEVs with a patch due date between June 1 to June 12, 2022 fall under the Top 40 Most Dangerous Software Weaknesses and OWASP Top 10:2021.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 370px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kev-3-1.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shruAxDI3SGeef01E?backgroundColor=green&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: DHS CISA KEVs<\/strong><\/p>\n<h2 dir=\"ltr\">Understand the Immediate Priorities<\/h2>\n<p dir=\"ltr\">CISA encourages organizations to reduce their exposure to cyberattacks by patching the vulnerabilities on the Known Exploited Vulnerability Catalog in a timely manner as part of their vulnerability management practices.<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\">To know more about our CISA known exploited vulnerabilities catalog analysis and vulnerabilities to be patched in June Month. <a href=\"https:\/\/cybersecurityworks.com\/blog\/cisa\/cisa-releases-a-directive-asking-organizations-to-patch-known-exploited-vulnerabilities.html\">Click here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On June 8, 2022, the US Cybersecurity and Infrastructure Security Agency (CISA) has added 36 new vulnerabilities, bringing the total number of exploited bugs to 777. This blog lists all of the DHS CISA KEVs that need to be patched this week (June 1 to June 12, 2022). The federal agencies are expected to patch [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8375"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8375"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}