セクター Finance

Timeframe: -28 days

Default Categories (81): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Appointment Software, Asset Management Software, Atlassian Confluence Plugin, Atlassian Jira App Software, Backup Software, Banking Software, Big Data Software, Billing Software, Bug Tracking Software, Business Process Management Software, Calendar Software, Cloud Software, Communications System, Connectivity Software, Continuous Integration Software, Customer Relationship Management System, Data Loss Prevention Software, Database Administration Software, Database Software, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Domain Name Software, Endpoint Management Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Financial Software, Firewall Software, Firmware Software, Groupware Software, Hardware Driver Software, Human Capital Management Software, Information Management Software, IP Phone Software, JavaScript Library, Knowledge Base Software, Log Management Software, Mail Client Software, Mail Server Software, Middleware, Network Attached Storage Software, Network Authentication Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Policy Management Software, Presentation Software, Printing Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Risk Management System, Router Operating System, Security Testing Software, Server Management Software, Service Management Software, Smartphone Operating System, Software Library, Software Management Software, Solution Stack Software, Spreadsheet Software, SSH Server Software, Ticket Tracking Software, Unified Communication Software, Video Surveillance Software, Virtualization Software, Web Browser, Web Server, Windowing System Software, Wireless LAN Software, Word Processing Software

タイムライン

ベンダー

Linux	364
Oracle	84
Google	54
Not Defined	52
Juniper	26

製品

Linux Kernel	364
Oracle MySQL Server	30
Google Chrome	26
Google Android	24
Juniper Junos OS	20

修復

Official Fix	744
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	130

悪用可能性

High	4
Functional	0
Proof-of-Concept	14
Unproven	0
Not Defined	858

アクセスベクター

Not Defined	0
Physical	8
Local	88
Adjacent	412
Network	368

認証

Not Defined	0
High	74
Low	560
None	242

ユーザー操作

Not Defined	0
Required	132
None	744

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	18
≤4	90
≤5	232
≤6	276
≤7	128
≤8	100
≤9	26
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	22
≤4	86
≤5	236
≤6	326
≤7	94
≤8	82
≤9	24
≤10	6

VulDB

≤1	0
≤2	2
≤3	24
≤4	102
≤5	224
≤6	266
≤7	142
≤8	92
≤9	16
≤10	8

NVD

≤1	876
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	568
≤2	2
≤3	6
≤4	22
≤5	52
≤6	74
≤7	34
≤8	68
≤9	38
≤10	12

ベンダー

≤1	876
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

0dayエクスプロイト

<1k	36
<2k	184
<5k	32
<10k	434
<25k	150
<50k	38
<100k	2
≥100k	0

本日のエクスプロイト

<1k	352
<2k	226
<5k	190
<10k	72
<25k	36
<50k	0
<100k	0
≥100k	0

闇ツールの市場規模

IOB - Indicator of Behavior (1000)

タイムライン

言語

en	608
ja	154
de	66
ru	58
es	32

国・地域

jp	172
us	140
ru	78
de	66
cn	50

アクター

Cobalt Strike	5
Sandworm	3
Mirai	2
Emotet	1
AsyncRAT	1

アクティビティ

関心

タイムライン

タイプ

Operating System	50
Smartphone Operating System	32
Web Browser	28
Firewall Software	26
Database Software	26

ベンダー

Linux	42
Oracle	40
Google	34
Not Defined	30
F5	16

製品

Linux Kernel	42
Google Android	18
Google Chrome	16
Oracle MySQL Server	16
Oracle Java SE	10

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	GNU C Library iconv メモリ破損	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00044	1.01	CVE-2024-2961
2	Tinyproxy HTTP Connection Header メモリ破損	9.8	9.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00091	0.47	CVE-2023-49606
3	PHP proc_open 特権昇格	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00043	0.43	CVE-2024-1874
4	Google Chrome WebAudio メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00000	0.86-	CVE-2024-4559
5	Google Chrome ANGLE メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00000	0.74-	CVE-2024-4558
6	ejs 未知の脆弱性	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.43	CVE-2024-33883
7	QNAP QTS/QuTS hero/QuTScloud 特権昇格	9.9	9.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.39	CVE-2024-32766
8	Node.js Header 特権昇格	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.63-	CVE-2024-27982
9	Google Android Health Data 特権昇格	5.3	5.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.47-	CVE-2024-23706
10	Apache ActiveMQ Jolokia/REST API 弱い認証	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00043	0.36	CVE-2024-32114
11	Adobe Acrobat Reader メモリ破損	7.0	6.9	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00053	0.33	CVE-2024-30301
12	PHP password_verify 未知の脆弱性	3.7	3.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.12	CVE-2024-3096
13	PHP Cookie 特権昇格	5.6	5.1	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.28	CVE-2024-2756
14	HP Application Enabling Software Driver Privilege Escalation	5.5	5.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00043	0.04	CVE-2024-1695
15	Google Chrome Picture In Picture メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00045	0.41	CVE-2024-4331
16	Linksys E5600 info 特権昇格	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00043	0.12	CVE-2024-33788
17	OpenBSD Kernel Multicast Routing 情報の漏洩	3.3	3.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.39-	CVE-2021-35000
18	mysql2 readCodeFor 特権昇格	9.8	9.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00045	0.29	CVE-2024-21511
19	Google Chrome Dawn メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00045	0.12	CVE-2024-4368
20	IBM AIX/VIOS Unix Domain SO_PEERID 特権昇格	7.5	7.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.31-	CVE-2024-27273

IOC - Indicator of Compromise (21)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	アクター	タイプ	信頼度
1	3.126.249.0/24	Azorult	predictive	高
2	3.236.77.0/24	Cobalt Strike	predictive	高
3	5.255.100.0/24	IcedID	predictive	高
4	XX.XX.XX.X/XX	Xxxxx	predictive	高
5	XX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
6	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
7	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
8	XX.XXX.XX.X/XX	Xxxxx Xxxxxxx	predictive	高
9	XXX.XXX.XXX.X/XX	Xxxxx	predictive	高
10	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
11	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
12	XXX.XX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
13	XXX.XXX.X.X/XX	Xxxxxxxxx	predictive	高
14	XXX.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
15	XXX.XXX.XX.X/XX	Xxxxxx	predictive	高
16	XXX.XXX.XXX.X/XX	Xxxxxxx	predictive	高
17	XXX.XX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
18	XXX.XX.XXX.X/XX	Xxxxx	predictive	高
19	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
20	XXX.XX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
21	XXX.XXX.XX.X/XX	Xxxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-137	CWE-88, CWE-94	Argument Injection	predictive	高
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	T1068	CAPEC-122	CWE-266, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	高
6	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	高
7	TXXXX.XXX	CAPEC-16	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
9	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
10	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
11	TXXXX	CAPEC-102	CWE-XXX	Xxx Xx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CAPEC-37	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
14	TXXXX	CAPEC-38	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
15	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CAPEC-142	CWE-XXX	Xxxxxxxx Xx Xxx Xxxxxxx Xx X Xxxxxxxx Xxxxxxxx	predictive	高
17	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
18	TXXXX	CAPEC-464	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	高
19	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
20	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
21	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
22	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (115)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/adminPage/conf/reload	predictive	高
2	File	/adminPage/conf/saveCmd	predictive	高
3	File	/adminPage/main/upload	predictive	高
4	File	/adminPage/www/addOver	predictive	高
5	File	/API/info	predictive	中
6	File	/CMD0/xml_modes.xml	predictive	高
7	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	高
8	File	/doctor/view-appointment-detail.php	predictive	高
9	File	/drivers/tty/serial/serial_core.c	predictive	高
10	File	/htdocs/webinc/js/bsc_sms_inbox.php	predictive	高
11	File	/proc/scsi/${proc_name}	predictive	高
12	File	/Public/webuploader/0.1.5/server/fileupload.php	predictive	高
13	File	/Public/webuploader/0.1.5/server/fileupload2.php	predictive	高
14	File	/sys/bus/i2c/devices/i2c-2/new_device	predictive	高
15	File	/u/:username/activity/reactions	predictive	高
16	File	/xxxxxxxxx/	predictive	中
17	File	xxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
18	File	xxxxx-xxxxxx-xxxx.xxx	predictive	高
19	File	xxxxxxxxxxx-xxxxxxx-xxxxxxx-xxxxxxx.xxx	predictive	高
20	File	xxxxxxxxxxxxx.xxxx	predictive	高
21	File	xxx_xxx_xxxxx.xxx	predictive	高
22	File	xxxx_xxxxxxx.xx	predictive	高
23	File	xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
24	File	xxxxxx/xxxxxx_xxxxxx.x	predictive	高
25	File	xx_xxx.x	predictive	中
26	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx_xxxx.x	predictive	高
27	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
28	File	xxxxxxx/xxxx/xxxx_xxxx.x	predictive	高
29	File	xxxxxxx/xxxxx/xxx-xxxxxxxxx/xxxxxxx.x	predictive	高
30	File	xxxxxxx/xxx/xxxxxxxx/xxx/xx.x	predictive	高
31	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxxx/xxxxxxxx/xxx.x	predictive	高
32	File	xxxxxxx/xxxx/xxx/xxxxxx.x	predictive	高
33	File	xxxxxxx/xxx/xxxxxx/xxxx/xxxx_xxxx.x	predictive	高
34	File	xxxxxxx/xxx/xxxx/xxxxx.x	predictive	高
35	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
36	File	xxxxxxxxx.xxx	predictive	高
37	File	xx/xxxxxx.x	predictive	中
38	File	xx/xxxx/xxxxxxx.x	predictive	高
39	File	xx/xxxxx/xxxx.x	predictive	高
40	File	xx/xxxxxx/xxx.x	predictive	高
41	File	xxxxxxx.xx	predictive	中
42	File	xxxxxx.xxx	predictive	中
43	File	xx/xxx/xxx_xx_xxx.x	predictive	高
44	File	xxxxxxx/xxxxx/xxxxxxxxxxxx.x	predictive	高
45	File	xxxxxxx/xxxxx/xxxx.x	predictive	高
46	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	高
47	File	xxxx/xxxx.x	predictive	中
48	File	xxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
49	File	xxxxxx/xxx/xxxxxx.x	predictive	高
50	File	xxxxxx/xxxx_xxxxx.x	predictive	高
51	File	xxxxxxxxxxxxx.xxx	predictive	高
52	File	xx/xxxx.x	predictive	中
53	File	xx/xxxxxxxx.x	predictive	高
54	File	xxxxxx/xxxxxxxxxxx.xx	predictive	高
55	File	xxxxxxx/xxxxx/xxxxxx/xxxxxx.xxx	predictive	高
56	File	xxx-xxx	predictive	低
57	File	xxx/xxxxxx/xx_xxxxxxxxx_xxxxx.x	predictive	高
58	File	xxx/xxxx/xxx.x	predictive	高
59	File	xxx/xxxx/xxxx.x	predictive	高
60	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	高
61	File	xxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
62	File	xxx.xx	predictive	低
63	File	xxxx.x	predictive	低
64	File	xxxx.xxx	predictive	中
65	File	xxx/xxxxxx.x	predictive	中
66	File	xxx.x	predictive	低
67	File	xxxxxxxxxxxx.xxxx	predictive	高
68	File	xxxxx_xxxx.x	predictive	中
69	File	xxxxxxx_xxxx_xxxxx.xxx	predictive	高
70	File	xxxx-xxxxxxx.xxx	predictive	高
71	File	xxxxxx-xxxxx.xxx	predictive	高
72	File	xxxxxx_xxxxxxxx.xxx	predictive	高
73	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	高
74	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	高
75	File	xxxx.xxx	predictive	中
76	Library	xxxxx-xx.xx	predictive	中
77	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
78	Library	xxx/xxxxxxxxxxxx.x	predictive	高
79	Library	xxx/xxxx_xxxxx.x	predictive	高
80	Library	xxx/xxxx_xxxxx.x	predictive	高
81	Library	xxx/xxxxxx.x	predictive	中
82	Library	xxx/xxxxxxxx.x	predictive	高
83	Library	xxx/xxx_xxxxxxx.x	predictive	高
84	Library	xxx/xxxxxxxxxxx.x	predictive	高
85	Library	xxx/xxxxxxxx.x	predictive	高
86	Library	xxxxxxxxxxxx.xxx	predictive	高
87	Library	xxxx-xxxxxx.xxx	predictive	高
88	Argument	xxxx	predictive	低
89	Argument	xxxxxxxxxxxxxxxx	predictive	高
90	Argument	xxxxxxx-xxxxxx	predictive	高
91	Argument	xxx	predictive	低
92	Argument	xxx	predictive	低
93	Argument	xxxxxx	predictive	低
94	Argument	xxxxxxx	predictive	低
95	Argument	xxxxxxx_xxxx	predictive	中
96	Argument	xxxx	predictive	低
97	Argument	xxxxxxxx/xxxxxx	predictive	高
98	Argument	xxx_xxxx/xx_xxx_xxxx	predictive	高
99	Argument	xxxxxxx	predictive	低
100	Argument	xx	predictive	低
101	Argument	xx/xxx/xxxxx	predictive	中
102	Argument	xxxxx	predictive	低
103	Argument	xxxxx	predictive	低
104	Argument	xxx_xxxxxxx	predictive	中
105	Argument	xxxxxxxx	predictive	中
106	Argument	xxxxxxxxx	predictive	中
107	Argument	xxxxxxx_xxxxx_xxxxxx	predictive	高
108	Argument	xxxxx	predictive	低
109	Argument	xxxxxxx	predictive	低
110	Argument	xxxxx	predictive	低
111	Argument	xxxx_xx	predictive	低
112	Argument	xxxxxxxx	predictive	中
113	Argument	xx_xxxxx	predictive	中
114	Argument	xxx_xx_xxx_xxxx	predictive	高
115	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	高

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!