Scribd Logo
Upload

Welcome to Scribd!

  • Wazuh Overview Vuls 1695024232

    Uploaded by

    salah al-hakimi
    12 views7 pages

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    12 views7 pages

    Wazuh Overview Vuls 1695024232

    Uploaded by

    salah al-hakimi

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 7

    info@wazuh.

    com
    https://wazuh.com

    Vulnerabilities report
    Discover what applications in your environment are affected by well-known vulnerabilities.

    2023-09-17T11:03:51 to 2023-09-18T11:03:51
    manager.name: wazuh-manager AND rule.groups: vulnerability-detector AND NOT
    agent.name: wazuh-manager

    Summary
    9 of 34 agents have low vulnerabilities.
    12 of 34 agents have medium vulnerabilities.
    18 of 34 agents have high vulnerabilities.
    6 of 34 agents have critical vulnerabilities.

    Top 3 agents with critical severity vulnerabilities

    ID Name IP Version Manager OS Registration date Last keep alive


    018 PMB-API-App-A 172.16.50.231 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:42.000 08:03:48.000
    2019 Standard
    10.0.17763
    032 AgentReports 192.168.120.100 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:55.000 08:03:44.000
    2019 Standard
    10.0.17763
    025 devOps 172.16.12.85 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:54.000 08:03:51.000
    2019 Standard
    10.0.17763

    Top 3 agents with high severity vulnerabilities

    ID Name IP Version Manager OS Registration date Last keep alive


    032 AgentReports 192.168.120.100 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:55.000 08:03:44.000
    2019 Standard
    10.0.17763
    018 PMB-API-App-A 172.16.50.231 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:42.000 08:03:48.000
    2019 Standard
    10.0.17763

    Copyright © 2021 Wazuh, Inc. Page 1 of 7


    info@wazuh.com
    https://wazuh.com

    ID Name IP Version Manager OS Registration date Last keep alive


    023 WIN- 192.168.33.192 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    HC6OV3EVTL2 Windows Server 10:37:44.000 08:03:45.000
    2019 Standard
    10.0.17763

    Top 3 agents with medium severity vulnerabilities

    ID Name IP Version Manager OS Registration date Last keep alive


    024 05-IT-salahH 172.16.12.181 Wazuh v4.3.9 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows 10 Pro 10:37:46.000 08:03:51.000
    10.0.19044
    032 AgentReports 192.168.120.100 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:55.000 08:03:44.000
    2019 Standard
    10.0.17763
    018 PMB-API-App-A 172.16.50.231 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:42.000 08:03:48.000
    2019 Standard
    10.0.17763

    Top 3 agents with low severity vulnerabilities

    ID Name IP Version Manager OS Registration date Last keep alive


    023 WIN- 192.168.33.192 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    HC6OV3EVTL2 Windows Server 10:37:44.000 08:03:45.000
    2019 Standard
    10.0.17763
    024 05-IT-salahH 172.16.12.181 Wazuh v4.3.9 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows 10 Pro 10:37:46.000 08:03:51.000
    10.0.19044
    018 PMB-API-App-A 172.16.50.231 Wazuh v4.2.5 wazuh-manager Microsoft Sep 19, 2022 @ Sep 18, 2023 @
    Windows Server 10:37:42.000 08:03:48.000
    2019 Standard
    10.0.17763

    Top 3 CVE
    Top CVE
    1 CVE-2022-40497
    2 CVE-2023-4584
    3 CVE-2023-4579

    Copyright © 2021 Wazuh, Inc. Page 2 of 7


    info@wazuh.com
    https://wazuh.com

    Agents by severity

    Top affected packages by CVEs

    Severity count

    Copyright © 2021 Wazuh, Inc. Page 3 of 7


    info@wazuh.com
    https://wazuh.com

    TOP affected packages alerts Evolution

    Most common CVEs Most common CWEs

    Most affected agents

    Copyright © 2021 Wazuh, Inc. Page 4 of 7


    info@wazuh.com
    https://wazuh.com

    Alert summary

    Severity Title Published CVE Count


    High CVE-2022-40497 affects Wazuh Agent 1664323200000 CVE-2022-40497 81
    High CVE-2023-4583 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4583 31
    High CVE-2023-4584 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4584 31
    High CVE-2023-4585 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4585 31
    Low CVE-2023-4579 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4579 31
    Medium CVE-2023-4573 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4573 31
    Medium CVE-2023-4574 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4574 31
    Medium CVE-2023-4575 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4575 31
    Medium CVE-2023-4577 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4577 31
    Medium CVE-2023-4578 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4578 31
    Medium CVE-2023-4580 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4580 31
    Medium CVE-2023-4581 affects Mozilla Firefox (x64 en-US) 1694390400000 CVE-2023-4581 31
    High CVE-2023-4511 affects Wireshark 4.0.6 64-bit 1692835200000 CVE-2023-4511 25
    High CVE-2023-4512 affects Wireshark 4.0.6 64-bit 1692835200000 CVE-2023-4512 25
    High CVE-2023-4513 affects Wireshark 4.0.6 64-bit 1692835200000 CVE-2023-4513 25
    Medium CVE-2023-2906 affects Wireshark 4.0.6 64-bit 1692921600000 CVE-2023-2906 25
    Medium CVE-2023-3648 affects Wireshark 4.0.6 64-bit 1689292800000 CVE-2023-3648 25
    Critical CVE-2023-4056 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4056 21
    Critical CVE-2023-4057 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4057 21
    Critical CVE-2023-4058 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4058 21
    High CVE-2023-4047 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4047 21
    High CVE-2023-4048 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4048 21
    High CVE-2023-4050 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4050 21
    High CVE-2023-4051 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4051 21
    High CVE-2023-4055 affects Mozilla Firefox (x64 en-US) 1690848000000 CVE-2023-4055 21
    High CVE-2023-3600 affects Mozilla Firefox (x64 en-US) 1689120000000 CVE-2023-3600 11
    High CVE-2023-37201 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37201 10
    High CVE-2023-37202 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37202 10
    High CVE-2023-37203 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37203 10
    High CVE-2023-37208 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37208 10
    High CVE-2023-37209 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37209 10
    High CVE-2023-37211 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37211 10
    High CVE-2023-37212 affects Mozilla Firefox (x64 en-US) 1688515200000 CVE-2023-37212 10
    Critical CVE-2023-4056 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4056 7
    Critical CVE-2023-4057 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4057 7
    Critical CVE-2023-4058 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4058 7
    High CVE-2023-3600 affects Mozilla Firefox (x86 en-US) 1689120000000 CVE-2023-3600 7
    High CVE-2023-37201 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37201 7
    High CVE-2023-37202 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37202 7

    Copyright © 2021 Wazuh, Inc. Page 5 of 7


    info@wazuh.com
    https://wazuh.com

    Severity Title Published CVE Count


    High CVE-2023-37203 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37203 7
    High CVE-2023-37208 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37208 7
    High CVE-2023-37209 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37209 7
    High CVE-2023-37211 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37211 7
    High CVE-2023-37212 affects Mozilla Firefox (x86 en-US) 1688515200000 CVE-2023-37212 7
    High CVE-2023-4047 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4047 7
    High CVE-2023-4048 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4048 7
    High CVE-2023-4050 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4050 7
    High CVE-2023-4051 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4051 7
    High CVE-2023-4055 affects Mozilla Firefox (x86 en-US) 1690848000000 CVE-2023-4055 7
    High CVE-2023-4583 affects Mozilla Firefox (x86 en-US) 1694390400000 CVE-2023-4583 7
    High CVE-2023-4584 affects Mozilla Firefox (x86 en-US) 1694390400000 CVE-2023-4584 7
    High CVE-2023-4585 affects Mozilla Firefox (x86 en-US) 1694390400000 CVE-2023-4585 7
    Low CVE-2023-4579 affects Mozilla Firefox (x86 en-US) 1694390400000 CVE-2023-4579 7
    Critical CVE-2022-48565 affects Python 3.8.1 (64-bit) 1692662400000 CVE-2022-48565 5
    Critical CVE-2023-34416 affects Mozilla Firefox (x64 en-US) 1687132800000 CVE-2023-34416 5
    Critical CVE-2023-34417 affects Mozilla Firefox (x64 en-US) 1687132800000 CVE-2023-34417 5
    High CVE-2022-21491 affects Oracle VM VirtualBox 6.1.32 1650326400000 CVE-2022-21491 5
    High CVE-2022-21571 affects Oracle VM VirtualBox 6.1.32 1658188800000 CVE-2022-21571 5
    High CVE-2022-21620 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-21620 5
    High CVE-2022-31705 affects VMware Workstation 1670976000000 CVE-2022-31705 5
    High CVE-2022-39421 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-39421 5
    High CVE-2022-39422 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-39422 5
    High CVE-2022-39424 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-39424 5
    High CVE-2022-39425 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-39425 5
    High CVE-2022-39426 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-39426 5
    High CVE-2022-39427 affects Oracle VM VirtualBox 6.1.32 1666051200000 CVE-2022-39427 5
    High CVE-2022-48560 affects Python 3.8.1 (64-bit) 1692662400000 CVE-2022-48560 5
    High CVE-2022-48566 affects Python 3.8.1 (64-bit) 1692662400000 CVE-2022-48566 5
    High CVE-2023-0412 affects Wireshark 4.0.2 64-bit 1674691200000 CVE-2023-0412 5
    High CVE-2023-1161 affects Wireshark 4.0.2 64-bit 1678060800000 CVE-2023-1161 5
    High CVE-2023-1992 affects Wireshark 4.0.2 64-bit 1681257600000 CVE-2023-1992 5
    High CVE-2023-21886 affects Oracle VM VirtualBox 6.1.32 1674000000000 CVE-2023-21886 5
    High CVE-2023-21886 affects Oracle VM VirtualBox 6.1.40 1674000000000 CVE-2023-21886 5
    High CVE-2023-21987 affects Oracle VM VirtualBox 6.1.32 1681776000000 CVE-2023-21987 5
    High CVE-2023-21987 affects Oracle VM VirtualBox 6.1.40 1681776000000 CVE-2023-21987 5
    High CVE-2023-21990 affects Oracle VM VirtualBox 6.1.32 1681776000000 CVE-2023-21990 5
    High CVE-2023-21990 affects Oracle VM VirtualBox 6.1.40 1681776000000 CVE-2023-21990 5
    High CVE-2023-22018 affects Oracle VM VirtualBox 6.1.32 1689638400000 CVE-2023-22018 5
    High CVE-2023-22018 affects Oracle VM VirtualBox 6.1.40 1689638400000 CVE-2023-22018 5
    High CVE-2023-2879 affects Wireshark 4.0.2 64-bit 1685059200000 CVE-2023-2879 5

    Copyright © 2021 Wazuh, Inc. Page 6 of 7


    info@wazuh.com
    https://wazuh.com

    Severity Title Published CVE Count


    High CVE-2023-36632 affects Python 3.8.1 (64-bit) 1687651200000 CVE-2023-36632 5
    High CVE-2023-36632 affects Python 3.9.13 (64-bit) 1687651200000 CVE-2023-36632 5
    High CVE-2023-36632 affects Python 3.9.2 (64-bit) 1687651200000 CVE-2023-36632 5
    High CVE-2023-4511 affects Wireshark 4.0.2 64-bit 1692835200000 CVE-2023-4511 5
    High CVE-2023-4512 affects Wireshark 4.0.2 64-bit 1692835200000 CVE-2023-4512 5
    High CVE-2023-4513 affects Wireshark 4.0.2 64-bit 1692835200000 CVE-2023-4513 5
    Low CVE-2022-21487 affects Oracle VM VirtualBox 6.1.32 1650326400000 CVE-2022-21487 5
    Low CVE-2022-21488 affects Oracle VM VirtualBox 6.1.32 1650326400000 CVE-2022-21488 5
    Low CVE-2023-21885 affects Oracle VM VirtualBox 6.1.32 1674000000000 CVE-2023-21885 5
    Low CVE-2023-21885 affects Oracle VM VirtualBox 6.1.40 1674000000000 CVE-2023-21885 5
    Low CVE-2023-21889 affects Oracle VM VirtualBox 6.1.32 1674000000000 CVE-2023-21889 5
    Low CVE-2023-21889 affects Oracle VM VirtualBox 6.1.40 1674000000000 CVE-2023-21889 5
    Low CVE-2023-21988 affects Oracle VM VirtualBox 6.1.32 1681776000000 CVE-2023-21988 5
    Low CVE-2023-21988 affects Oracle VM VirtualBox 6.1.40 1681776000000 CVE-2023-21988 5
    Low CVE-2023-21991 affects Oracle VM VirtualBox 6.1.32 1681776000000 CVE-2023-21991 5
    Low CVE-2023-21991 affects Oracle VM VirtualBox 6.1.40 1681776000000 CVE-2023-21991 5
    Low CVE-2023-21999 affects Oracle VM VirtualBox 6.1.32 1681776000000 CVE-2023-21999 5
    Low CVE-2023-21999 affects Oracle VM VirtualBox 6.1.40 1681776000000 CVE-2023-21999 5
    Low CVE-2023-34414 affects Mozilla Firefox (x64 en-US) 1687132800000 CVE-2023-34414 5

    Copyright © 2021 Wazuh, Inc. Page 7 of 7

    You might also like