CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The list of vulnerabilities is below -

CVE-2022-35914 (CVSS score: 9.8) - Teclib GLPI Remote Code Execution Vulnerability
CVE-2022-33891 (CVSS score: 8.8) - Apache Spark Command Injection Vulnerability

agency apache catalog cisa code code execution command command injection cve cve-2022-35914 cvss cybersecurity exploitation exploited flaws infrastructure infrastructure security injection it management kev known exploited vulnerabilities list management management systems remote code remote code execution score security security flaws spark systems vulnerabilities vulnerability