UCSF IT Technology

Apache released security updates to address a Critical vulnerability in Apache Roller open-source, Java-based blogging server software. An attacker could exploit the vulnerability to retain unauthorized access even after a password change. For a complete description of the vulnerabilities and affected systems, go to CVE-2025-24859: Apache Roller: Insufficient Session Expiration on Password Change.

Chrome released security updates to address vulnerabilities in Chrome.For a complete description of the vulnerabilities and affected systems, go to Chrome Releases.IT Security Read more about IT Security service offerings.

SonicWall has released security updates to address vulnerabilities in NetExtender for Windows. For a complete description of the vulnerabilities and affected systems, go to SonicWall NetExtender Windows Client Multiple Vulnerabilities 7.2.IT Security Read more about IT Security service offerings.

VMware has released security updates to address vulnerabilities in VMware Products.For a complete description of the vulnerabilities and affected systems, go to Security Advisories - Tanzu.IT Security Read more about IT Security service offerings.

Zoom released security updates to address vulnerabilities in Zoom. For a complete description of the vulnerabilities and affected systems, go to Zoom Security Bulletins.IT Security Read more about IT Security service offerings.

SAP released a security update to address vulnerabilities in SAP products.For a complete description of the vulnerabilities and affected systems, go to SAP Security Patch Day – April 2025.IT Security Read more about IT Security service offerings.

Vulnerabilities in Multiple Ivanti Products. A cyber threat actor could exploit this vulnerability to take control of an affected system.For a complete description of the vulnerabilities and affected systems, go to April Security Update | Ivanti.IT Security 

Cisco released security updates to address vulnerabilities in Cisco products.For a complete description of the vulnerabilities and affected systems, go to Cisco Security Advisories.IT Security Read more about IT Security service offerings.