Findings

588 components watched across 4 products

Last scan 4 Jul, 11:01

Active threats2KEV-listed · Article 14 record auto-opened · 24h clock running

· Actively exploitedCVSS 10.0 97%

CVE-2021-44228log4j-core@2.14.1·Atlas Gateway

-h -m -s

due 5 Jul, 09:01 UTC

CISA Added 2021-12-10. Required action: Apply updates per vendor instructions; for affected products, follow CISA mitigation guidance.Due 2021-12-24

Apache Log4j 2 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints (Log4Shell).

Upgrade tolog4j-core ≥ 2.17.1

Open record REC-DEMOA1 Investigate

· Actively exploitedCVSS 10.0 91%

CVE-2024-3094xz-utils@5.6.0·Atlas IoT Hub

-h -m -s

due 5 Jul, 13:01 UTC

CISA Added 2024-04-04. Required action: Apply mitigations per vendor instructions; downgrade xz-utils to a known-good version.Due 2024-04-25

Malicious code discovered in the upstream tarballs of xz, starting with version 5.6.0 - backdoor allows authentication bypass via crafted SSH connections.

Upgrade toxz-utils ≥ 5.4.6

Open record REC-DEMOA2 Investigate

Watchlist3EPSS ≥ 70% · not yet KEV-listed · trending toward exploitation

Component / CVE / Product

EPSS (30d)

CVSS

Severity

7-day

Trend

CVE-2024-23897jenkins-core@2.441

Atlas Dashboard · Jenkins 2.441 and earlier allows attackers to read arbitrary files via the CLI a…

92%

9.8CVSS

critical

+30% View

CVE-2024-21626runc@1.1.7

Atlas Gateway · runc through 1.1.11 has a file descriptor leak that allows container breakout ("…

78%

8.6CVSS

critical

+37% View

CVE-2024-29415ip@2.0.0

Atlas Mobile SDK · The ip package incorrectly classifies certain hostnames as private, enabling SSR…

71%

9.1CVSS

critical

+37% View

1,247 entries · 234,891 scores · 588 components watched·Scan 4 Jul, 11:01 UTC

You're in the live demo

You're exploring with sample data. Refresh resets the workspace. Subscribe when you're ready to track real records.

Subscribe to CRA Ready