T1530Collection
Data from Cloud Storage
Adversaries may access data from cloud storage. Many IaaS providers offer solutions for online data object storage such as Amazon S3, Azure Storage, and Google Cloud Storage. Similarly, SaaS enterprise platforms such as Office 365 and Google Workspace provide cloud-based document storage to users through services such as OneDrive and Google Drive, while SaaS application providers such as Slack…
CVEs2
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.2
Reports0
CVEs linked to Data from Cloud Storage
2 CVEs, by priority. Each link shows its badge.- CVE-2023-22952Multiple SugarCRM Products Remote Code Execution VulnerabilitySugarCRM · Multiple ProductsKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+7 moreMITRE CTID mapping of the KEV entry · follow-on activity80.1%Top 0.38%69.1priority
- CVE-2024-49035Microsoft Partner Center Improper Access Control VulnerabilityMicrosoft · Partner CenterKEVCritical · 9.8T1195Supply Chain CompromiseT1068Exploitation for Privilege Escalation+1 moreMITRE CTID mapping of the KEV entry · primary impact1.3%Top 30%58.9priority