內容說明：

CISA於11/11至11/17在Known Exploited Vulnerabilities Catalog(KEV)中發布7個已遭駭客利用之漏洞。

影響平台：

Palo Alto Networks｜Expedition
Atlassian｜Jira Server and Data Center
Cisco｜Adaptive Security Appliance (ASA)
Metabase｜Metabase
Microsoft｜Windows

處置建議：

修補說明請參考以下官方連結：
Palo Alto Networks｜Expedition
https://security.paloaltonetworks.com/PAN-SA-2024-0010
Atlassian｜Jira Server and Data Center
https://jira.atlassian.com/browse/JRASERVER-72695
Cisco｜Adaptive Security Appliance (ASA)
https://web.archive.org/web/20140403043510/http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120
Metabase｜Metabase
https://github.com/metabase/metabase/security/advisories/GHSA-w73v-6p7p-fpfr
Microsoft｜Windows
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451

CVE編號：

CVE-2014-2120
CVE-2021-26086
CVE-2021-41277
CVE-2024-9463
CVE-2024-9465
CVE-2024-43451
CVE-2024-49039

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2014-2120
3. https://nvd.nist.gov/vuln/detail/CVE-2021-26086
4. https://nvd.nist.gov/vuln/detail/CVE-2021-41277
5. https://nvd.nist.gov/vuln/detail/CVE-2024-9463
6. https://nvd.nist.gov/vuln/detail/CVE-2024-9465
7. https://nvd.nist.gov/vuln/detail/CVE-2024-43451
8. https://nvd.nist.gov/vuln/detail/CVE-2024-49039

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/information_security_information_sharing_1586/
發布日期：22/11/2024