セクター Insurance

Timeframe: -28 days

Default Categories (76): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Asset Management Software, Atlassian Confluence Plugin, Atlassian Jira App Software, Backup Software, Big Data Software, Billing Software, Bug Tracking Software, Business Process Management Software, Calendar Software, Cloud Software, Communications System, Connectivity Software, Continuous Integration Software, Customer Relationship Management System, Database Administration Software, Database Software, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Domain Name Software, Endpoint Management Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Firewall Software, Firmware Software, Groupware Software, Hardware Driver Software, Human Capital Management Software, Information Management Software, IP Phone Software, JavaScript Library, Knowledge Base Software, Log Management Software, Mail Client Software, Mail Server Software, Middleware, Network Attached Storage Software, Network Authentication Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Policy Management Software, Presentation Software, Printing Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Risk Management System, Router Operating System, Security Testing Software, Server Management Software, Service Management Software, Smartphone Operating System, Software Library, Software Management Software, Solution Stack Software, Spreadsheet Software, SSH Server Software, Ticket Tracking Software, Unified Communication Software, Virtualization Software, Web Browser, Web Server, Windowing System Software, Wireless LAN Software, Word Processing Software

タイムライン

ベンダー

Linux	358
Microsoft	114
Oracle	80
Not Defined	52
Google	50

製品

Linux Kernel	358
Microsoft Windows	70
Foxit PDF Reader	48
Google Chrome	28
Juniper Junos OS	28

修復

Official Fix	864
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	124

悪用可能性

High	4
Functional	2
Proof-of-Concept	42
Unproven	100
Not Defined	842

アクセスベクター

Not Defined	0
Physical	8
Local	148
Adjacent	398
Network	436

認証

Not Defined	0
High	82
Low	604
None	304

ユーザー操作

Not Defined	0
Required	206
None	784

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	26
≤4	94
≤5	242
≤6	282
≤7	156
≤8	138
≤9	48
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	26
≤4	104
≤5	236
≤6	386
≤7	112
≤8	110
≤9	12
≤10	4

VulDB

≤1	0
≤2	0
≤3	34
≤4	114
≤5	234
≤6	264
≤7	162
≤8	142
≤9	36
≤10	4

NVD

≤1	990
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	714
≤2	2
≤3	4
≤4	18
≤5	48
≤6	64
≤7	40
≤8	66
≤9	26
≤10	8

ベンダー

≤1	884
≤2	0
≤3	0
≤4	0
≤5	6
≤6	8
≤7	12
≤8	46
≤9	34
≤10	0

0dayエクスプロイト

<1k	26
<2k	208
<5k	36
<10k	444
<25k	158
<50k	96
<100k	22
≥100k	0

本日のエクスプロイト

<1k	346
<2k	236
<5k	224
<10k	106
<25k	72
<50k	6
<100k	0
≥100k	0

闇ツールの市場規模

IOB - Indicator of Behavior (1000)

タイムライン

言語

en	572
de	136
ja	100
ru	58
fr	44

国・地域

us	246
de	110
jp	108
ru	78
gb	64

アクター

Cobalt Strike	2
DPRK	1
Shade	1
Havoc	1
Cerber	1

アクティビティ

関心

タイムライン

タイプ

Operating System	52
Web Browser	20
Database Software	18
Router Operating System	16
Web Server	12

ベンダー

Microsoft	32
Oracle	28
Linux	24
Google	14
Not Defined	14

製品

Microsoft Windows	26
Linux Kernel	24
Google Chrome	12
cym1102 nginxWebUI	8
Tormach xsTECH CNC Router	8

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	GNU C Library iconv メモリ破損	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00045	4.09	CVE-2024-2961
2	Vesystem Cloud Desktop fileupload2.php 特権昇格	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	3.06	CVE-2024-3804
3	Vesystem Cloud Desktop fileupload.php 特権昇格	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	2.91	CVE-2024-3803
4	PHP proc_open 特権昇格	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	1.39	CVE-2024-1874
5	PHP password_verify 未知の脆弱性	3.7	3.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00000	1.21	CVE-2024-3096
6	PHP Cookie 特権昇格	5.6	5.1	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00000	1.03	CVE-2024-2756
7	Backdoor.Win32.Dumador.c FTP Server メモリ破損	6.3	5.6	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00000	0.53
8	mysql2 readCodeFor 特権昇格	9.8	9.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.71	CVE-2024-21511
9	PHP mb_encode_mimeheader サービス拒否	5.3	4.8	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00000	0.46	CVE-2024-2757
10	Palo Alto Networks PAN-OS GlobalProtect 特権昇格	8.9	8.7	$0-$5k	$0-$5k	High	Official Fix	0.93657	0.60	CVE-2024-3400
11	PuTTY ECDSA Nonce Generation 情報の漏洩	3.7	3.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00046	0.43	CVE-2024-31497
12	Tormach xsTECH CNC Router Commands サービス拒否	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.07	CVE-2024-22815
13	Oracle VM VirtualBox Core Local Privilege Escalation	7.8	7.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00043	0.32	CVE-2024-21111
14	Google Chrome QUIC メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00059	0.28	CVE-2024-3837
15	OpenStack Storlets yoga-eom gateway.py メモリ破損	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.21	CVE-2024-28717
16	IBM QRadar Suite Software/Cloud Pak for Security Web UI クロスサイトスクリプティング	4.4	4.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00000	0.32+	CVE-2023-47731
17	Google Chrome Downloads メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00059	0.24	CVE-2024-3834
18	Node.js child_process.spawn 特権昇格	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.32	CVE-2024-27980
19	Oracle MySQL Connectors サービス拒否	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00046	0.25	CVE-2024-21090
20	Welotec SMART EMS/VPN Security Suite 特権昇格	5.4	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.28+	CVE-2024-3911

IOC - Indicator of Compromise (16)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	アクター	タイプ	信頼度
1	3.75.210.0/24	Cobalt Strike	predictive	高
2	5.253.63.0/24	RedLine Stealer	predictive	高
3	X.XXX.XXX.X/XX	Xxxxxx	predictive	高
4	XX.XXX.XX.X/XX	Xxx Xxxxx	predictive	高
5	XX.XX.XXX.X/XX	Xxxxxxx	predictive	高
6	XX.XXX.XX.X/XX	Xxxxxx	predictive	高
7	XXX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
8	XXX.X.XXX.X/XX	Xxxxxx	predictive	高
9	XXX.XXX.XXX.X/XX	Xxxxx	predictive	高
10	XXX.XX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
11	XXX.XXX.XXX.X/XX	Xxxxx Xxxxxxx	predictive	高
12	XXX.XXX.XXX.X/XX	Xxxxxxxxx Xxxxxx	predictive	高
13	XXX.XXX.XXX.X/XX	Xxxxxxxx Xxx	predictive	高
14	XXX.XX.XX.X/XX	Xxxxx	predictive	高
15	XXX.XXX.XX.X/XX	Xxxx	predictive	高
16	XXX.X.XX.X/XX	Xxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (26)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22, CWE-23, CWE-25, CWE-35	Path Traversal	predictive	高
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	高
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
6	T1068	CAPEC-104	CWE-250, CWE-269, CWE-274, CWE-284	Execution with Unnecessary Privileges	predictive	高
7	TXXXX.XXX	CAPEC-0	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	高
8	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
9	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
10	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
11	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
12	TXXXX	CAPEC-108	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	高
13	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
14	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
15	TXXXX	CAPEC-0	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
16	TXXXX.XXX	CAPEC-120	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	高
17	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	高
18	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
19	TXXXX.XXX	CAPEC-0	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
20	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
21	TXXXX	CAPEC-464	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	高
22	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
23	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
24	TXXXX.XXX	CAPEC-0	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
25	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高
26	TXXXX	CAPEC-0	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	高

IOA - Indicator of Attack (138)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/adminPage/conf/reload	predictive	高
2	File	/adminPage/conf/saveCmd	predictive	高
3	File	/adminPage/main/upload	predictive	高
4	File	/adminPage/www/addOver	predictive	高
5	File	/cart.php	predictive	中
6	File	/CMD0/xml_modes.xml	predictive	高
7	File	/description.php	predictive	高
8	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	高
9	File	/etc/passwd	predictive	中
10	File	/index.php	predictive	中
11	File	/login	predictive	低
12	File	/Product.php	predictive	中
13	File	/Public/webuploader/0.1.5/server/fileupload.php	predictive	高
14	File	/Public/webuploader/0.1.5/server/fileupload2.php	predictive	高
15	File	/sys/kernel/notes	predictive	高
16	File	/u/:username/activity/reactions	predictive	高
17	File	/webeditor/	predictive	中
18	File	activate_jet_details_form_handler.php	predictive	高
19	File	add-vehicle.php	predictive	高
20	File	xxxxx-xxxxxx-xxxx.xxx	predictive	高
21	File	xxxxx-xxxxxxxx-xxxxxx.xxx	predictive	高
22	File	xxxxx/xxxxx/xxxxxxxxxx.xxx	predictive	高
23	File	xxxxx/xxxxx/xxxxxxxxxxxx.xxx	predictive	高
24	File	xxxxx/xxxxx/xxxxx.xxx	predictive	高
25	File	xxxxx/xxxxxxxx/xxxxx.xxx	predictive	高
26	File	xxxxx/xxxxx.xxx	predictive	高
27	File	xxxxx/xxxxx/xxxxxxxxxx.xxx	predictive	高
28	File	xxxxxxx/xxx/xxxx/xxxx/xx/xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxx.xx	predictive	高
29	File	xxxx_xxxxxx.x	predictive	高
30	File	xxxxxxxxxx-xxxx.xxx	predictive	高
31	File	xxxxx/xxx-xxxxxx.x	predictive	高
32	File	xxxxx/xxx-xx-xxx.x	predictive	高
33	File	xxx_xxx.xxxx	predictive	中
34	File	xxxx_xxxxxxx.xx	predictive	高
35	File	xxxxxx/xxxxxx_xxxxxx.x	predictive	高
36	File	xx_xxx.x	predictive	中
37	File	xxxxxxxxxxxxxx.xxx	predictive	高
38	File	xxxxxxxxx.xxx	predictive	高
39	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx_xxxx.x	predictive	高
40	File	xxxxxxx/xxx/xxxx/xxx.x	predictive	高
41	File	xxxxxxx/xxxxx/xxxxxxx/xx_xxxxxxxxx.x	predictive	高
42	File	xxxxxxx/xxxx/xxx/xxxxxx.x	predictive	高
43	File	xxxx.x	predictive	低
44	File	xxxx-xxxx.xxx	predictive	高
45	File	xx/xxxxx/xxxx-xx.x	predictive	高
46	File	xx/xxxx/xxxx.x	predictive	高
47	File	xxxxxxx.xx	predictive	中
48	File	xxxxx	predictive	低
49	File	xxxxx_xxxxxx	predictive	中
50	File	xx/xxx/xxx_xx_xxx.x	predictive	高
51	File	xxxxxxx/xxxxx/xxxxxxxxxxxx.x	predictive	高
52	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	高
53	File	xxxxx.x	predictive	低
54	File	xxxxxx/xxx/xxxxxx.x	predictive	高
55	File	xxxxxx/xxx/xxxxxxx.x	predictive	高
56	File	xxxxxx/xxx/xxxxx.x	predictive	高
57	File	xxxxxx/xxxx_xxxxx.x	predictive	高
58	File	xxxxxx/xxx/xxxx.x:	predictive	高
59	File	xxx.x	predictive	低
60	File	xxxxxxxxx.xx	predictive	中
61	File	xxx.x	predictive	低
62	File	xxxxxxx/xxxxxx.xxx	predictive	高
63	File	xx/xxxx_xxxxx.x	predictive	高
64	File	xx/xxxxxxxx.x	predictive	高
65	File	xxx/xxx/xxx_xxxxxx.x	predictive	高
66	File	xxx/xxxxxx/xxxxxxxxxxxxx.x	predictive	高
67	File	xxxxx.x	predictive	低
68	File	xxxxx.x	predictive	低
69	File	xxxxxxxxx.xxx	predictive	高
70	File	xxx.x	predictive	低
71	File	xxxxx/xxx/xxxx/xxxxx-xxx-xxx.x	predictive	高
72	File	xxxxx_xxxx.x	predictive	中
73	File	xxxx-xxxxxxx.xxx	predictive	高
74	File	xxxx_xxxxxx.xx	predictive	高
75	File	xxx.x	predictive	低
76	File	xxxxxx-xxxxx.xxx	predictive	高
77	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	高
78	File	_xxxxxxxxxx.x	predictive	高
79	Library	xxxx.xxx	predictive	中
80	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
81	Library	xxx/xxxxxxxxxxxx.x	predictive	高
82	Library	xxx/xxxx_xxxxx.x	predictive	高
83	Library	xxx/xxx_xxxx.x	predictive	高
84	Library	xxx/xxxx_xxxxx.x	predictive	高
85	Library	xxx/xxxxxx.x	predictive	中
86	Library	xxx/xxx_xxxxxxx.x	predictive	高
87	Library	xxx/xxxxxxxxxxx.x	predictive	高
88	Library	xxx/xxxxxxxx.x	predictive	高
89	Library	xxxxxxxx.xxx	predictive	中
90	Library	xxxx.x	predictive	低
91	Library	xxxx-xxxxxx.xxx	predictive	高
92	Argument	xxxxxx	predictive	低
93	Argument	xxxxx_xx	predictive	中
94	Argument	xxxx	predictive	低
95	Argument	xxxx	predictive	低
96	Argument	xxxxxxxxxxxxxxxx	predictive	高
97	Argument	xxxxxxxxxxxxx/xxxxxxxxx	predictive	高
98	Argument	xx-xxxxxx	predictive	中
99	Argument	xxxxxxxx	predictive	中
100	Argument	xx_xxxx_xxx	predictive	中
101	Argument	xxxxxxxxxxx	predictive	中
102	Argument	xxx	predictive	低
103	Argument	xxxxxxx	predictive	低
104	Argument	xxxxxxx_xxxx	predictive	中
105	Argument	xxxx	predictive	低
106	Argument	xxxxxx_xxxx	predictive	中
107	Argument	xxxxxxx	predictive	低
108	Argument	xxxx	predictive	低
109	Argument	xx	predictive	低
110	Argument	xx	predictive	低
111	Argument	xx/xxx/xxxxx	predictive	中
112	Argument	xxxxx	predictive	低
113	Argument	xxx_xx	predictive	低
114	Argument	xxx_xxxxxxx	predictive	中
115	Argument	xxxxx_xxx	predictive	中
116	Argument	xxxxxxx	predictive	低
117	Argument	xxxxxxxx	predictive	中
118	Argument	xxxxxxxxx	predictive	中
119	Argument	xxx_xxxxxx	predictive	中
120	Argument	xxxxxx	predictive	低
121	Argument	xxxxxxx_xxxxx_xxxxxx	predictive	高
122	Argument	xxxxxxx	predictive	低
123	Argument	xxxxxxx	predictive	低
124	Argument	xxxxxxxx/xxxxxx	predictive	高
125	Argument	xxxxx	predictive	低
126	Argument	xxxxxxxxxxx	predictive	中
127	Argument	xxxx_xxxxxxx_xxxx	predictive	高
128	Argument	xxxx	predictive	低
129	Argument	xxxx/xxxxxxxx	predictive	高
130	Argument	xxxx_xx	predictive	低
131	Argument	xxxxxxxx	predictive	中
132	Argument	xxxxxx xxxxx	predictive	中
133	Argument	xxxxxxxx/xxxxxxxx/xxxxx_xxxxxxxx/xxxxx_xxxxxxxx	predictive	高
134	Argument	xxxx_xxxxx	predictive	中
135	Argument	xxxx_xx	predictive	低
136	Argument	xxxx_xxxx	predictive	中
137	Argument	xxxxx	predictive	低
138	Argument	x-xxxxxxxxx-xxx	predictive	高

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!