U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog.
CISA added three vulnerabilities to its catalog: Broadcom Brocade Fabric OS Code Injection, Qualitia Active! Mail Stack-Based Buffer Overflow, and Commvault Web Server Unspecified Vulnerability.
The vulnerabilities allow remote attackers to execute arbitrary code, bypass security restrictions, and compromise webservers.
CISA orders federal agencies to fix the vulnerabilities by specified due dates.