CISA updates on Apache and two more vulnerabilities added to their database – UPDATED 18 May 2022

The vulnerabilities are for Zyxel firewalls and VMWare Spring Cloud.

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

The Apache issue is with Tomcat:

Apache Releases Security Advisory for Tomcat | CISA

My advice: Either you or your IT support need to check whether these issues impact your systems. You need to have a master document that details your systems, hardware, software, online, networks, back-ups, suppliers etc – so when cyber security (or operational) issues arise you and your support teams can quickly check if you are affected. From there you can take fast, effective action.

Further Reading

Researchers, NSA cybersecurity director warn of hackers targeting Zyxel vulnerability – The Record by Recorded Future