AI Summary

The US Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog. CISA has added two specific vulnerabilities to the catalog due to evidence of active exploitation. The first vulnerability affects PTC Windchill and FlexPLM, a product used for product lifecycle management, and is related to improper input validation. The second vulnerability affects Cisco Unified Communications Manager, a server-based communication system, and is related to server-side request forgery. The inclusion of these vulnerabilities in the KEV Catalog suggests that they pose a significant risk to organizations that have not yet addressed them.

AI summaries can be wrong sometimes—always verify important details using the source article.