Vulnerability Trends July 2020

ObaidaAlsulaiman

Obaida Al-Sulaiman, Information Security Manager at ScanTitan,

Table of Contents
Archived reportThis digest covers July 2020 and is kept for reference. The details were accurate when it was published and have not been updated. For current data, see our vulnerability statistics report and the research library.

As part of our monthly vulnerability trends, this report shows the monthly top 10 trends on security vulnerabilities and how hackers, malware, and exploit kits are exploiting those vulnerabilities. To demonstrate, we assign vulnerability trends value as a percentage of how each vulnerability is significantly gaining the attention of cyber security communities, attackers, together with malware. In either case, companies can benefit from the report to have more cyber threat insights and relatively anticipate attacks wave that might target their public assets in the following months.

Download the full vulnerability digest report by clicking here.

Subscribe to the monthly vulnerability digest report by clicking here.

The following chart shows the trends.

In July 2020, we noticed that many vulnerabilities impacted edge appliances like published services, routers and application delivery appliances.

July most attracted vulnerability is an RCE in F5 BIG-IP appliance. This vulnerability has more than 40% of overall July trends. The next in line is Windows DNS Server RCE (CVE-2020-1350) which was published in Microsoft July patch Tuesday.

The following table shows the details of the trends.

CVEVulnerabilityPublish DateExploitedTrends*
CVE-2020-1206RCE in F5 BIG-IP Management Interface01/07/2020Yes47%
CVE-2020-2021RCE in Windows DNS Server14/07/2020Yes31%
CVE-2020-1301SAP NetWeaver Authentication Bypass14/07/2020Yes5%
CVE-2020-13777GRUB 2 BootHole Vulnerability29/07/2020No5%
CVE-2020-9859Cisco ASA File Traversal22/07/2020Yes4%
CVE-2020-0543RCE in Microsoft Sharepoint14/07/2020Yes3%
CVE-2020-1170Apache Guacamole Code Execution02/07/2020Yes2%
CVE-2020-3342Windows 10 Privilege Elevation14/07/2020Yes1%
CVE-2020-1299Citrix ADC unauthenticated access10/07/2020Yes1%
CVE-2020-5410RCE in Moxa Routers15/07/2020Yes1%

Download the full vulnerability digest report by clicking here.

Subscribe to the monthly vulnerability digest report by clicking here.

o

Information Security Manager · Dubai, UAE · 12+ years InfoSec experience

Obaida specialises in web application security, vulnerability management, and external attack surface reduction for SMB and mid-market organisations. All ScanTitan content is reviewed against live scan findings before publication.

Share :

Facebook
LinkedIn

Continue reading

Weekly security digest

New CVEs, scan methodology updates, practical guides. One email per week — no sales pitch.

GDPR compliant · Unsubscribe any time