Katalog CVE (hal. 452)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.042 (Critical 36.325 · High 105.117 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 24 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.551–22.600 dari 263.042 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-78574 okta hyperdrive The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced pa...	6.3 Medium	—	0,10%	8 Sep 2026
CVE-2026-78579 okta access gateway The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw...	6.5 Medium	—	0,24%	8 Sep 2026
CVE-2026-78620 okta access gateway The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payl...	4.9 Medium	—	0,34%	8 Sep 2026
CVE-2026-78545 okta access gateway The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated...	7.2 High	—	0,38%	8 Sep 2026
CVE-2026-78550 okta access gateway The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the u...	7.2 High	—	0,38%	8 Sep 2026
CVE-2026-76002 adobe coldfusion ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page,...	6.1 Medium	—	0,43%	8 Sep 2026
CVE-2026-76190 adobe coldfusion ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code exec...	8.6 High	—	0,83%	8 Sep 2026
CVE-2026-76199 adobe photoshop Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An at...	8.6 High	—	0,29%	8 Sep 2026
CVE-2026-75991 adobe illustrator Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could...	8.6 High	—	0,30%	8 Sep 2026
CVE-2026-75992 adobe illustrator Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...	7.8 High	—	0,26%	8 Sep 2026
CVE-2026-75993 adobe coldfusion ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page,...	8.5 High	—	0,45%	8 Sep 2026
CVE-2026-75998 adobe coldfusion ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access s...	7.5 High	—	0,82%	8 Sep 2026
CVE-2026-75999 adobe coldfusion ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged at...	8.4 High	—	0,47%	8 Sep 2026
CVE-2026-76000 adobe coldfusion ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabilit...	6.5 Medium	—	0,41%	8 Sep 2026
CVE-2026-75990 adobe illustrator Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could ex...	8.6 High	—	0,28%	8 Sep 2026
CVE-2026-75742 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75746 adobe coldfusion ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execut...	9.1 Critical	—	0,99%	8 Sep 2026
CVE-2026-75771 adobe photoshop Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,31%	8 Sep 2026
CVE-2026-75862 adobe photoshop Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,31%	8 Sep 2026
CVE-2026-75863 adobe photoshop Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,31%	8 Sep 2026
CVE-2026-75734 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75735 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75736 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75737 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75738 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75739 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75740 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75741 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75722 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75724 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75725 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75726 adobe experience manager Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverag...	3.5 Low	—	0,54%	8 Sep 2026
CVE-2026-75727 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75729 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75730 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75731 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75733 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-75713 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75714 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75715 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75716 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75717 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75718 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75719 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75720 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75704 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75705 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75706 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75707 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-75708 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.