Week of June 13, 2022: Microsoft's June Patches Meet a New CISA Known Exploited Vulnerability

Security leaders spent the week of June 13, 2022 working through a dense run of vendor patches, headlined by Microsoft's monthly update cycle and a new addition to CISA's Known Exploited Vulnerabilities Catalog. Cisco, Citrix, SAP, Adobe and Drupal each issued advisories in the same window, handing defenders a broad patching workload across operating systems, network appliances, creative software and content-management platforms.

Microsoft Ships June 2022 Security Updates for Multiple Products

Microsoft released a batch of security updates on June 14, 2022, addressing multiple vulnerabilities across its software portfolio. CISA flagged the release the same day, warning that an attacker could exploit some of the flaws to take control of an affected system. The agency pointed administrators to Microsoft's June 2022 Security Update Summary and Deployment Information for patch guidance, underscoring the update cycle's relevance for enterprises running Microsoft products during that week. (CISA)

CISA Adds a New Actively Exploited Vulnerability to KEV Catalog

CISA added one new vulnerability to its Known Exploited Vulnerabilities Catalog on June 14, 2022, citing evidence of active exploitation. The addition fell under Binding Operational Directive 22-01, which requires federal civilian executive branch agencies to remediate cataloged flaws by a set deadline. CISA described such vulnerabilities as a frequent attack vector for malicious cyber actors and urged all organizations, not only federal agencies, to prioritize timely remediation as part of routine vulnerability management. (CISA)

Cisco Patches Email Security Appliance and Small Business Router Flaws

Cisco released security updates on June 16, 2022 covering several products, including the Email Security Appliance, Secure Email and Web Manager, and the Small Business RV110W, RV130, RV130W and RV215W routers. CISA's alert highlighted an external authentication bypass vulnerability, an information disclosure flaw, and a remote command execution and denial of service issue affecting the router line, and warned that an attacker could exploit some of these flaws to take control of an affected system. (CISA)

Citrix Addresses Application Delivery Management Vulnerabilities

Citrix issued security updates on June 14, 2022 to address vulnerabilities in its Application Delivery Management product. CISA's advisory the same day cautioned that an attacker could exploit these vulnerabilities to take control of an affected system. The agency directed users and administrators to Citrix Security Update CTX460016 for the specific fixes and encouraged organizations running the product to apply the necessary updates given the potential for full system compromise. (CISA)

SAP Issues June 2022 Patch Day Updates

SAP released its monthly security updates on June 14, 2022, addressing vulnerabilities affecting multiple products as part of its June Patch Day. CISA's accompanying alert noted that an attacker could exploit some of the flaws to take control of an affected system and pointed administrators to SAP's Security Patch Day bulletin for June 2022 for remediation details, adding SAP to the list of major vendors issuing coordinated fixes that week. (CISA)

Adobe Patches Animate, Illustrator, InDesign and Other Creative Products

Adobe released security updates on June 14, 2022 covering Animate, Bridge, Illustrator, InCopy, InDesign and RoboHelp Server, among other products. CISA's alert the same day warned that an attacker could exploit some of the vulnerabilities to take control of an affected system and listed specific Adobe Security Bulletins, including APSB22-24 through APSB22-31, for administrators to review. The advisory grouped Adobe with Microsoft, Cisco, Citrix and SAP in the same week's wave of coordinated patch releases. (CISA)

Drupal Flags Guzzle Library Vulnerability Affecting Contributed Projects

Drupal released security updates on June 13, 2022 to address a vulnerability in the third-party Guzzle library, which does not affect Drupal core but could affect some contributed projects or custom code running on Drupal sites. CISA's advisory the same day warned that exploitation could allow a remote attacker to take control of an affected website, and pointed administrators to Drupal security advisory SA-CORE-011 for the necessary updates. (CISA)