CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2025-22457 |
Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | — | 0.9998 | 2025-04-04 | 2025-04-11 | RW |
CVE-2025-24813 |
Apache | Tomcat | — | 0.9994 | 2025-04-01 | 2025-04-22 | |
CVE-2024-20439 |
Cisco | Smart Licensing Utility | — | 0.9709 | 2025-03-31 | 2025-04-21 | |
CVE-2025-2783 |
Chromium Mojo | — | 0.0924 | 2025-03-27 | 2025-04-17 | ||
CVE-2019-9875 |
Sitecore | CMS and Experience Platform (XP) | — | 0.2544 | 2025-03-26 | 2025-04-16 | |
CVE-2019-9874 |
Sitecore | CMS and Experience Platform (XP) | — | 0.8374 | 2025-03-26 | 2025-04-16 | |
CVE-2025-30154 |
reviewdog | action-setup GitHub Action | — | 0.0249 | 2025-03-24 | 2025-04-14 | |
CVE-2017-12637 |
SAP | NetWeaver | — | 0.9511 | 2025-03-19 | 2025-04-09 | |
CVE-2024-48248 |
NAKIVO | Backup and Replication | — | 0.9436 | 2025-03-19 | 2025-04-09 | |
CVE-2025-1316 |
Edimax | IC-7100 IP Camera | — | 0.7448 | 2025-03-19 | 2025-04-09 | |
CVE-2025-30066 |
tj-actions | changed-files GitHub Action | — | 0.7209 | 2025-03-18 | 2025-04-08 | |
CVE-2025-24472 |
Fortinet | FortiOS and FortiProxy | — | 0.0723 | 2025-03-18 | 2025-04-08 | RW |
CVE-2025-21590 |
Juniper | Junos OS | — | 0.0174 | 2025-03-13 | 2025-04-03 | |
CVE-2025-24201 |
Apple | Multiple Products | — | 0.0385 | 2025-03-13 | 2025-04-03 | |
CVE-2025-24993 |
Microsoft | Windows | — | 0.0222 | 2025-03-11 | 2025-04-01 | |
CVE-2025-24991 |
Microsoft | Windows | — | 0.0202 | 2025-03-11 | 2025-04-01 | |
CVE-2025-24985 |
Microsoft | Windows | — | 0.0389 | 2025-03-11 | 2025-04-01 | |
CVE-2025-24984 |
Microsoft | Windows | — | 0.0199 | 2025-03-11 | 2025-04-01 | |
CVE-2025-24983 |
Microsoft | Windows | — | 0.0187 | 2025-03-11 | 2025-04-01 | |
CVE-2025-26633 |
Microsoft | Windows | — | 0.3039 | 2025-03-11 | 2025-04-01 | RW |
CVE-2024-13161 |
Ivanti | Endpoint Manager (EPM) | — | 0.8981 | 2025-03-10 | 2025-03-31 | |
CVE-2024-13160 |
Ivanti | Endpoint Manager (EPM) | — | 0.9099 | 2025-03-10 | 2025-03-31 | |
CVE-2024-13159 |
Ivanti | Endpoint Manager (EPM) | — | 0.9999 | 2025-03-10 | 2025-03-31 | |
CVE-2024-57968 |
Advantive | VeraCore | — | 0.3228 | 2025-03-10 | 2025-03-31 | |
CVE-2025-25181 |
Advantive | VeraCore | — | 0.5555 | 2025-03-10 | 2025-03-31 | |
CVE-2025-22226 |
VMware | ESXi, Workstation, and Fusion | — | 0.0163 | 2025-03-04 | 2025-03-25 | |
CVE-2025-22225 |
VMware | ESXi | — | 0.0102 | 2025-03-04 | 2025-03-25 | RW |
CVE-2025-22224 |
VMware | ESXi and Workstation | — | 0.0156 | 2025-03-04 | 2025-03-25 | |
CVE-2024-50302 |
Linux | Kernel | — | 0.0081 | 2025-03-04 | 2025-03-25 | |
CVE-2024-4885 |
Progress | WhatsUp Gold | — | 0.9929 | 2025-03-03 | 2025-03-24 | |
CVE-2018-8639 |
Microsoft | Windows | — | 0.2218 | 2025-03-03 | 2025-03-24 | RW |
CVE-2022-43769 |
Hitachi Vantara | Pentaho Business Analytics (BA) Server | — | 0.9767 | 2025-03-03 | 2025-03-24 | |
CVE-2022-43939 |
Hitachi Vantara | Pentaho Business Analytics (BA) Server | — | 0.9227 | 2025-03-03 | 2025-03-24 | |
CVE-2023-20118 |
Cisco | Small Business RV Series Routers | — | 0.5411 | 2025-03-03 | 2025-03-24 | |
CVE-2023-34192 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.7727 | 2025-02-25 | 2025-03-18 | |
CVE-2024-49035 |
Microsoft | Partner Center | — | 0.0130 | 2025-02-25 | 2025-03-18 | |
CVE-2024-20953 |
Oracle | Agile Product Lifecycle Management (PLM) | — | 0.0393 | 2025-02-24 | 2025-03-17 | |
CVE-2017-3066 |
Adobe | ColdFusion | — | 0.9060 | 2025-02-24 | 2025-03-17 | |
CVE-2025-24989 |
Microsoft | Power Pages | — | 0.0162 | 2025-02-21 | 2025-03-14 | |
CVE-2025-0111 |
Palo Alto Networks | PAN-OS | — | 0.0200 | 2025-02-20 | 2025-03-13 | |
CVE-2025-23209 |
Craft CMS | Craft CMS | — | 0.2164 | 2025-02-20 | 2025-03-13 | |
CVE-2025-0108 |
Palo Alto Networks | PAN-OS | — | 0.9814 | 2025-02-18 | 2025-03-11 | |
CVE-2024-53704 |
SonicWall | SonicOS | — | 0.9531 | 2025-02-18 | 2025-03-11 | RW |
CVE-2024-57727 |
SimpleHelp | SimpleHelp | — | 0.9683 | 2025-02-13 | 2025-03-06 | RW |
CVE-2025-24200 |
Apple | iOS and iPadOS | — | 0.0446 | 2025-02-12 | 2025-03-05 | |
CVE-2024-41710 |
Mitel | SIP Phones | — | 0.4165 | 2025-02-12 | 2025-03-05 | |
CVE-2024-40891 |
Zyxel | DSL CPE Devices | — | 0.2289 | 2025-02-11 | 2025-03-04 | |
CVE-2024-40890 |
Zyxel | DSL CPE Devices | — | 0.2070 | 2025-02-11 | 2025-03-04 | |
CVE-2025-21418 |
Microsoft | Windows | — | 0.0213 | 2025-02-11 | 2025-03-04 | |
CVE-2025-21391 |
Microsoft | Windows | — | 0.0228 | 2025-02-11 | 2025-03-04 |