內容說明

CISA於10/27至11/2在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

影響平台

Broadcom｜VMware Aria Operations and VMware Tools
XWiki｜Platform
Dassault Systèmes｜DELMIA Apriso

 

處置建議

 
修補說明請參考以下官方連結：

Broadcom｜VMware Aria Operations and VMware Tools
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149

XWiki｜Platform
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rr6p-3pfg-562j

Dassault Systèmes｜DELMIA Apriso
https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204
https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205

 

CVE編號

CVE-2025-6204
CVE-2025-6205
CVE-2025-24893
CVE-2025-41244
 
 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2025-6204
3. https://nvd.nist.gov/vuln/detail/CVE-2025-6205
4. https://nvd.nist.gov/vuln/detail/CVE-2025-24893
5. https://nvd.nist.gov/vuln/detail/CVE-2025-41244