東京都デジタルサービス局から以下の製品に関する注意喚起がありました。
配信日は5/28、6/4です。
概要
各脆弱性に該当する場合は、対策を実施願います。
・Splunk製品の脆弱性に関する注意喚起
https://advisory.splunk.com/advisories/SVD-2025-0604
https://advisory.splunk.com/advisories/SVD-2025-0603
https://advisory.splunk.com/advisories/SVD-2025-0602
https://advisory.splunk.com/advisories/SVD-2025-0601
・Acronis Cyber Protect Cloud Agentの脆弱性に関する注意喚起
https://security-advisory.acronis.com/advisories/SEC-8646
https://security-advisory.acronis.com/advisories/SEC-8133
https://security-advisory.acronis.com/advisories/SEC-8692
・IBM製品の脆弱性に関する注意喚起
https://www.ibm.com/support/pages/node/7235432
・Dell Technologies製品の脆弱性に関する注意喚起
https://www.dell.com/support/kbdoc/ja-jp/000326299/dsa-2025-213-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities
https://www.dell.com/support/kbdoc/ja-jp/000325632/dsa-2025-225
https://www.dell.com/support/kbdoc/ja-jp/000325586/dsa-2025-215-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities
https://www.dell.com/support/kbdoc/ja-jp/000325087/security-update-for-dell-networker-runtime-environment-nre-third-party-component-vulnerabilities
https://www.dell.com/support/security/ja-jp
・HPE製品の脆弱性に関する注意喚起
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04872en_us&docLocale=en_US
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04853en_us&docLocale=en_US
https://support.hpe.com/connect/s/securitybulletinlibrary?language=ja#sort=%40hpescuniversaldate%20descending&layout=table&numberOfResults=25&f:@kmdoclanguagecode=[cv1871440,cv1871422]
・Apache Tomcatの脆弱性に関する注意喚起
https://jvn.jp/vu/JVNVU91929206/
・Microsoft Edgeの脆弱性に関する注意喚起
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#june-3-2025
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#may-29-2025
・Broadcom(旧Vmware)製品の脆弱性に関する注意喚起
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25707
・Google Chrome、Chrome OSの脆弱性に関する注意喚起
https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html
https://chromereleases.googleblog.com/2025/06/extended-stable-updates-for-desktop.html
https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-chromeos_29.html
https://chromereleases.googleblog.com/2025/05/long-term-support-channel-update-for_29.html
・F5製品の脆弱性に関する注意喚起
https://my.f5.com/manage/s/article/K000151431
https://my.f5.com/manage/s/article/K000151520
https://my.f5.com/manage/s/article/K000151516
https://my.f5.com/s/new-updated-articles#sort=%40f5_updated_published_date%20descending&numberOfResults=100&f:@f5_document_type=[Security%20Advisory]&periodFilter=1&dateField=1
・Veritas Technologies製品の脆弱性に関する注意喚起
https://www.veritas.com/support/en_US/security/VTS25-008
・NVIDIA製品の脆弱性に関する注意喚起
https://nvidia.custhelp.com/app/answers/detail/a_id/5643
https://www.nvidia.com/en-us/security/
・Citrix製品の脆弱性に関する注意喚起
https://support.citrix.com/s/article/CTX692748-xenserver-and-citrix-hypervisor-security-update-for-cve202527462-cve202527463-cve202527464?language=en_US
・Palo Alto Networks製品の脆弱性に関する注意喚起
https://security.paloaltonetworks.com/PAN-SA-2025-0009
https://security.paloaltonetworks.com/
・Cisco製品の脆弱性に関する注意喚起
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-restart-ss-uf986G2Q
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-priv-esc-3Pk96SU4
https://sec.cloudapps.cisco.com/security/center/publicationListing.x
・Jira(プロジェクト管理ツール)の脆弱性に関する注意喚起
https://confluence.atlassian.com/security/security-bulletin-may-20-2025-1561365992.html
・OpenSSLの脆弱性に関する注意喚起
https://jvn.jp/vu/JVNVU91298012/
・Mozilla Firefox、Mozilla Thunderbirdの脆弱性に関する注意喚起
https://www.mozilla.org/en-US/security/advisories/mfsa2025-41/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-42/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-43/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-45/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/
・BINDの脆弱性に関する注意喚起
https://www.jpcert.or.jp/newsflash/2025052201.html
・GitLabの脆弱性に関する注意喚起
https://about.gitlab.com/releases/2025/05/21/patch-release-gitlab-18-0-1-released/
・キヤノン製複合機、レーザービームプリンターの脆弱性に関する注意喚起
https://jvn.jp/vu/JVNVU93455283/
https://jvn.jp/vu/JVNVU99563104/