內容說明

CISA於4/28至5/4在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

 

影響平台

Commvault｜Command Center
Yiiframework｜Yii
Apache｜HTTP Server
SonicWall｜SMA100 Appliances
SAP｜NetWeaver
Broadcom｜Brocade Fabric OS
Qualitia｜Active! Mail
Commvault｜Web Server

 

處置建議

 
修補說明請參考以下官方連結：

Commvault｜Command Center
https://documentation.commvault.com/securityadvisories/CV_2025_04_1.html

Yiiframework｜Yii
https://www.yiiframework.com/news/709/please-upgrade-to-yii-2-0-52

Apache｜HTTP Server
https://httpd.apache.org/security/vulnerabilities_24.html

SonicWall｜SMA100 Appliances
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018

SAP｜NetWeaver
https://me.sap.com/notes/3594142

Broadcom｜Brocade Fabric OS
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25602

Qualitia｜Active! Mail
https://www.qualitia.com/jp/news/2025/04/18_1030.html

Commvault｜Web Server
https://documentation.commvault.com/securityadvisories/CV_2025_03_1.html 
https://www.commvault.com/blogs/notice-security-advisory-update 
 
 

CVE編號

CVE-2023-44221
CVE-2024-38475
CVE-2024-58136
CVE-2025-1976
CVE-2025-3928
CVE-2025-31324
CVE-2025-34028
CVE-2025-42599

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2023-44221 
3. https://nvd.nist.gov/vuln/detail/CVE-2024-38475 
4. https://nvd.nist.gov/vuln/detail/CVE-2024-58136 
5. https://nvd.nist.gov/vuln/detail/CVE-2025-1976 
6. https://nvd.nist.gov/vuln/detail/CVE-2025-3928 
7. https://nvd.nist.gov/vuln/detail/CVE-2025-31324 
8. https://nvd.nist.gov/vuln/detail/CVE-2025-34028 
9. https://nvd.nist.gov/vuln/detail/CVE-2025-42599 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/5bc3d58b-6c0a-444c-8d61-73b0f813731c/
發布日期：07/05/2025