UCSF IT Technology

Mozilla released security updates to address High vulnerabilities in Thunderbird, Firefox ESR, and Firefox. An attacker could exploit these vulnerabilities to cause user confusion or conduct spoofing attacks. For a complete description of the vulnerabilities and affected systems go to Mozilla Foundation Security Advisories. IT Security

Cisco released security updates to address Medium and High vulnerabilities in the Cisco Identity Services Engine (ISE). A remote attacker could exploit some of these vulnerabilities to bypass authorization and access system files.

Foxit has released security updates to address vulnerabilities in Foxit Reader.  A remote attacker could exploit these vulnerabilities to perform arbitrary code execution. For a complete description of the vulnerabilities and affected systems go to Security updates available in Foxit PDF Reader 12.0.2 and Foxit PDF Editor 12.0.2. IT Security

Lenovo has released security updates to address vulnerabilities in Lenovo UEFI Firmware impacting multiple devices.  Because UEFI is responsible for launching the operating system when a device is powered on, it has made the technology an attractive option for threat actors looking to drop malware that's difficult to detect and remove.

Cisco has released security updates to address Medium and High vulnerabilities in multiple Cisco products.  An attacker could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Cisco Security Advisories page. IT Security

SAP released a security update to address a vulnerability in the Central Management Console and BI Launchpad in SAP BusinessObjects Business Intelligence Platform.  An attacker could exploit this vulnerability to execute arbitrary code. For a complete description of the vulnerabilities and affected systems go to CVE-2022-41203. IT Security

Spring Security has released a security update to address a vulnerability in the Spring Security.  A remote attacker could exploit this vulnerability to access administrative functions without proper authentication. For a complete description of the vulnerabilities and affected systems go to CVE-2022-31692: Authorization rules can be bypassed via forward or include dispatcher types in Spring Security.

Citrix has released security updates to address Critical vulnerabilities impacting Citrix ADC and Citrix Gateway. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.