內容說明

CISA於10/20至10/26在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

 

影響平台

Adobe｜Commerce and Magento
Apple｜Multiple Products
Kentico｜Xperience CMS
Microsoft｜Windows
Motex｜LANSCOPE Endpoint Manager
Oracle｜E-Business Suite

 

處置建議

 
修補說明請參考以下官方連結：

Adobe｜Commerce and Magento
https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397

Apple｜Multiple Products
https://support.apple.com/en-us/HT213340
https://support.apple.com/en-us/HT213341
https://support.apple.com/en-us/HT213342
https://support.apple.com/en-us/HT213345
https://support.apple.com/en-us/HT213346

Kentico｜Xperience CMS
https://devnet.kentico.com/download/hotfixes

Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-33073
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59287

Motex｜LANSCOPE Endpoint Manager
https://www.motex.co.jp/news/notice/2025/release251020/

Oracle｜E-Business Suite
https://www.oracle.com/security-alerts/alert-cve-2025-61884.html

 

CVE編號

CVE-2022-48503
CVE-2025-2746
CVE-2025-2747
CVE-2025-33073
CVE-2025-54236
CVE-2025-59287
CVE-2025-61884
CVE-2025-61932
 
 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2022-48503
3. https://nvd.nist.gov/vuln/detail/CVE-2025-2746
4. https://nvd.nist.gov/vuln/detail/CVE-2025-2747
5. https://nvd.nist.gov/vuln/detail/CVE-2025-33073
6. https://nvd.nist.gov/vuln/detail/CVE-2025-54236
7. https://nvd.nist.gov/vuln/detail/CVE-2025-59287
8. https://nvd.nist.gov/vuln/detail/CVE-2025-61884
9. https://nvd.nist.gov/vuln/detail/CVE-2025-61932