{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1531 Account Access Removal","home_page_url":"https://patchfirst.co/technique/T1531/","feed_url":"https://patchfirst.co/feed/technique/T1531.json","description":"New and newly exploited CVEs that lead to ATT&CK T1531 Account Access Removal, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2023-34362#kev","url":"https://patchfirst.co/cve/CVE-2023-34362/","title":"[KEV] CVE-2023-34362: Progress MOVEit Transfer SQL Injection Vulnerability","content_text":"Progress · MOVEit Transfer. In CISA KEV since 2023-06-02, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1082 System Information Discovery; T1105 Ingress Tool Transfer; T1136 Create Account; +1 more. Named in 2 threat reports. Priority 86.0 of 100.","summary":"Progress MOVEit Transfer SQL Injection Vulnerability","date_published":"2023-06-02T00:00:00.000Z","date_modified":"2026-06-17T06:03:28.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059","T1005","T1082","T1105","T1136","T1531"],"_patchfirst":{"reason":"kev","priority":86,"kev":{"dateAdded":"2023-06-02","ransomware":true},"epss":{"score":0.99934,"percentile":0.9997},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"MOVEit Transfer","techniqueIds":["T1190","T1059","T1005","T1082","T1105","T1136","T1531"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-1689","url":"https://patchfirst.co/cve/CVE-2019-1689/","title":"CVE-2019-1689: Cisco Webex Teams for iOS Arbitrary File Upload Vulnerability","content_text":"Cisco · Cisco Webex Teams. Not in CISA KEV. EPSS 1.6% (higher than 75.4% of CVEs). CVSS 7.3 HIGH. ATT&CK: T1105 Ingress Tool Transfer; T1531 Account Access Removal; T1565.001 Stored Data Manipulation. Priority 20.2 of 100.","summary":"Cisco Webex Teams for iOS Arbitrary File Upload Vulnerability","date_published":"2019-02-25T00:00:00.000Z","date_modified":"2024-11-21T19:44:24.000Z","tags":["T1105","T1531","T1565.001"],"_patchfirst":{"reason":"published","priority":20.2,"kev":null,"epss":{"score":0.01574,"percentile":0.75413},"cvss":{"score":7.3,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco Webex Teams","techniqueIds":["T1105","T1531","T1565.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}