Vulnerability Trends May 2020

ObaidaAlsulaiman

Obaida Al-Sulaiman, Information Security Manager at ScanTitan,

Table of Contents
Archived reportThis digest covers May 2020 and is kept for reference. The details were accurate when it was published and have not been updated. For current data, see our vulnerability statistics report and the research library.

In addition, this report identically shows the monthly top 10 trends on security vulnerabilities and how hackers, malware, and exploit kits are exploiting those vulnerabilities. To demonstrate, we assign vulnerability trends value as a percentage of how each vulnerability is significantly gaining the attention of cyber security communities, attackers, together with malware. In either case companies can benefit from the report to have more cyber threat insights and relatively anticipate attacks wave that might target their public assets in the following months.

Download the full vulnerability digest report by clicking here.

Subscribe to the monthly vulnerability digest report by clicking here.

The following chart shows the trends.

In May 2020, we see that the information security community pays more attention to Microsoft published vulnerabilities as CVE-2020-1048, which is not the most critical, gained the most trends. Ordinarily, this vulnerability gained almost 25% of overall May trends.

All things considered, the next in line is the critical and exploitable SaltStack RCE vulnerability titled as CVE-2020-11651. Other critical and exploitable is the SQL Injection in vBulletin titled as CVE-2020-12720.

The following table shows the details of the trends.

CVEVulnerabilityPublish DateExploitedTrends*
CVE-2020-1048Windows print spooler service elevation21/05/2020No24%
CVE-2020-11651SaltStack RCE01/05/2020Yes14%
CVE-2020-12720vBulletin SQL Injection07/05/2020Yes13%
CVE-2020-0096Android 8/9 elevation14/05/2020No13%
CVE-2020-8617BIND denial of service19/05/2020Yes11%
CVE-2020-8616BIND denial of service19/05/2020Yes10%
CVE-2020-3956VMware Cloud Directory RCE20/05/2020No8%
CVE-2020-11060GLPI command execution12/05/2020No7%
CVE-2020-8983Citrix Storage Zones RCE07/05/2020No7%
CVE-2020-9484Tomcat deserialization code execution20/05/2020Yes6%

Download the full vulnerability digest report by clicking here.

Subscribe to the monthly vulnerability digest report by clicking here.

o

Information Security Manager · Dubai, UAE · 12+ years InfoSec experience

Obaida specialises in web application security, vulnerability management, and external attack surface reduction for SMB and mid-market organisations. All ScanTitan content is reviewed against live scan findings before publication.

Share :

Facebook
LinkedIn

Continue reading

Weekly security digest

New CVEs, scan methodology updates, practical guides. One email per week — no sales pitch.

GDPR compliant · Unsubscribe any time