Sector Transportation

Timeframe: -28 days

Default Categories (62): Access Management Software, Accounting Software, Advertising Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Appointment Software, Automation Software, Backup Software, Billing Software, Business Process Management Software, Calendar Software, Cloud Software, Communications System, Connectivity Software, Customer Relationship Management System, Database Administration Software, Database Software, Directory Service Software, Document Management Software, Document Reader Software, E-Commerce Management Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Firewall Software, Groupware Software, Hardware Driver Software, Information Management Software, Log Management Software, Mail Client Software, Mail Server Software, Middleware, Multimedia Player Software, Network Attached Storage Software, Network Authentication Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, SCADA Software, Server Management Software, Service Management Software, Software Library, Spreadsheet Software, SSH Server Software, Ticket Tracking Software, Transport Management Software, Unified Communication Software, Video Surveillance Software, Virtualization Software, Web Browser, Web Server, Windowing System Software, Wireless LAN Software, Word Processing Software

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Oracle	212
Not Defined	56
Schneider Electric	28
IBM	28
Apple	26

Product

Oracle MySQL Server	30
Adobe Acrobat Reader	22
Apple macOS	22
Oracle Communications Cloud Native Core Binding Su ...	22
Linux Kernel	18

Remediation

Official Fix	454
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	92

Exploitability

High	0
Functional	0
Proof-of-Concept	14
Unproven	0
Not Defined	534

Access Vector

Not Defined	0
Physical	2
Local	42
Adjacent	66
Network	438

Authentication

Not Defined	0
High	70
Low	172
None	306

User Interaction

Not Defined	0
Required	152
None	396

C3BM Index

CVSSv3 Base

≤1	0
≤2	2
≤3	10
≤4	56
≤5	92
≤6	82
≤7	96
≤8	126
≤9	22
≤10	62

CVSSv3 Temp

≤1	0
≤2	2
≤3	10
≤4	58
≤5	92
≤6	110
≤7	76
≤8	122
≤9	16
≤10	62

VulDB

≤1	0
≤2	2
≤3	22
≤4	64
≤5	94
≤6	80
≤7	78
≤8	126
≤9	18
≤10	64

NVD

≤1	494
≤2	0
≤3	0
≤4	0
≤5	4
≤6	4
≤7	0
≤8	20
≤9	8
≤10	18

CNA

≤1	398
≤2	0
≤3	0
≤4	8
≤5	14
≤6	34
≤7	6
≤8	66
≤9	10
≤10	12

Vendor

≤1	546
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	2
≤10	0

Exploit 0-day

<1k	26
<2k	126
<5k	36
<10k	96
<25k	198
<50k	14
<100k	52
≥100k	0

Exploit Today

<1k	170
<2k	124
<5k	130
<10k	46
<25k	78
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

IOB - Indicator of Behavior (1000)

Timeline

Lang

en	866
ja	60
ru	24
de	16
zh	8

Country

us	168
jp	66
cn	32
no	22
ru	20

Actors

Dealply	1
Carbanak	1
Naikon	1
Mirai	1
Mikey	1

Activities

Interest

Timeline

Type

Cloud Software	44
Web Browser	18
Database Software	14
Firewall Software	14
Router Operating System	10

Vendor

Oracle	56
Not Defined	26
Google	16
F5	14
IBM	12

Product

Google Chrome	16
Oracle Communications Unified Assurance	14
F5 BIG-IP	12
Oracle Database Server	8
Oracle Communications Elastic Charging Engine	6

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	Calendar Event Management System sql injection	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	2.03	0.00890	CVE-2023-0675
2	Calendar Event Management System Login Page sql injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	1.81	0.00954	CVE-2023-0663
3	GNU C Library Call Graph Monitor gmon.c __monstartup buffer overflow	4.6	4.4	$0-$5k	$0-$5k	Not Defined	Official Fix	1.33	0.00950	CVE-2023-0687
4	NREL api-umbrella-web Flash Message cross site scripting	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	1.40	0.00950	CVE-2015-10072
5	Samsung Cloud PNG File path traversal	4.5	4.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.84-	0.00000	CVE-2023-21448
6	Samsung Cloud access control	3.6	3.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.84-	0.00000	CVE-2023-21447
7	Oracle Communications Billing and Revenue Management Billing Care/BOC/DM Kafka/REST API denial of service	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.82	0.01108	CVE-2022-42003
8	SiteFusion Application Server Extension getextension.php path traversal	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	1.39	0.01018	CVE-2016-15023
9	IBM WebSphere Application Server Sequence code injection	9.0	8.8	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.97	0.01978	CVE-2023-23477
10	Ubiquiti EdgeRouter/UniFi Security Gateway DHCPv6 Prefix Delegation unknown vulnerability	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.78-	0.00000	CVE-2023-23912
11	Western Digital My Cloud Firmware Upgrade signature verification	8.0	7.2	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.93	0.00890	CVE-2021-36226
12	Google Chrome V8 type confusion	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.78	0.01055	CVE-2023-0696
13	Apache HTTP Server mod_proxy_ajp request smuggling	7.3	7.0	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.78	0.00885	CVE-2022-36760
14	Western Digital My Cloud REST API unrestricted upload	8.0	7.2	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.85	0.00890	CVE-2021-36225
15	Oracle Communications Unified Inventory Management Rulesets xml external entity reference	9.8	9.6	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.56	0.00885	CVE-2021-41411
16	Google Chrome GPU use after free	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.63	0.01055	CVE-2023-0699
17	Western Digital My Cloud hard-coded password	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.67	0.00890	CVE-2021-36224
18	Google Chrome DevTools type confusion	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.81	0.01055	CVE-2023-0703
19	Microsoft Edge denial of service	3.1	3.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.56	0.00000	CVE-2023-21720
20	WALLIX Access Manager information disclosure	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.44+	0.00000	CVE-2023-23592

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	Actor	Type	Confidence
1	23.129.64.0/24	Prophet Spider	predictive	High
2	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	High
3	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	High
4	XXX.XX.XXX.X/XX	Xxxxxxxxx	predictive	High
5	XXX.XXX.XXX.X/XX	Xxxxx	predictive	High

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-22, CWE-23	Pathname Traversal	predictive	High
2	T1040	CWE-294, CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CWE-74	Injection	predictive	High
4	T1059	CWE-88, CWE-94, CWE-1321	Cross Site Scripting	predictive	High
5	T1059.007	CWE-79	Cross Site Scripting	predictive	High
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
9	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
14	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxxxxxx Xxxx Xxxxxxx Xx Xxxxxxxx Xxx Xxxxxxxxxxxxxx	predictive	High
15	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxx.xxx Xxxxxxxxxxxxxxxx: Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
16	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxx Xx X Xxxxxxxxxxx'x Xxxxx Xx Xxxxx	predictive	High
18	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	High
19	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
21	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx	predictive	High
22	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
23	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (41)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/api/v1/registration/validateEmail	predictive	High
2	File	/CPE	predictive	Low
3	File	/opt/Citrix/ICAClient/util/ctxwebhelper	predictive	High
4	File	/Services/Misc.asmx/SearchTag	predictive	High
5	File	/setnetworksettings/IPAddress	predictive	High
6	File	/SetNetworkSettings/SubnetMask	predictive	High
7	File	/xxxx/xxx/xxxxxxxxxxx	predictive	High
8	File	xxx_xxxxxxx.xxx	predictive	High
9	File	xxxx.x	predictive	Low
10	File	xxxxxx.x	predictive	Medium
11	File	xxxxxxxx_xxxxxxxx.xxx	predictive	High
12	File	xxxxxxx/xxx/xxx-xxxxxxxx.x	predictive	High
13	File	xxxxxxx/xxx/xxxx/xxxx.x	predictive	High
14	File	xxxxxxxxxxxx.xxx	predictive	High
15	File	xxxx.x	predictive	Low
16	File	xxx_xxx.x	predictive	Medium
17	File	xxxxxxxxxxxxx/xxx/xxx/xxxxxxxxxx/xxxxxxx/xxxxxxxxxx.xxxx	predictive	High
18	File	xxxxxxxxxxxxxx.xxx	predictive	High
19	File	xxx/xxxxx.xxx	predictive	High
20	File	xx_xxxxx/xxxxxxxxx.x	predictive	High
21	File	xx_xxxxx/xxxx.x	predictive	High
22	File	xxx/xxxx/xxx.x	predictive	High
23	File	xxx/xxxxx/xxx_xxx.x	predictive	High
24	File	xxxxxx/xxxx.xx	predictive	High
25	Library	/xxxx/xxxxx/xxx/xxxxxxx_xxx.x	predictive	High
26	Library	xxxxxxx/xxxxxxxx.xxx	predictive	High
27	Argument	xxxxxx	predictive	Low
28	Argument	xxxx	predictive	Low
29	Argument	xxxx_xxxxx_xxxxxxxxxx	predictive	High
30	Argument	xxxxxxxxx/xxxxx_xxxx	predictive	High
31	Argument	xxxx/xxx	predictive	Medium
32	Argument	xx_xxx	predictive	Low
33	Argument	xxxxxxx.xxx_xxxxxxxxxx	predictive	High
34	Argument	xxxxxxxxxx	predictive	Medium
35	Argument	xxxxxxx	predictive	Low
36	Argument	xxxxxxx	predictive	Low
37	Argument	xxxxx/xxx	predictive	Medium
38	Argument	xxxxxxx	predictive	Low
39	Argument	xxxx	predictive	Low
40	Argument	xxxxxxxx	predictive	Medium
41	Argument	xxxxxxxx/xxxxxxxx	predictive	High

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!