CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2017-9791 |
Apache | Struts 1 | — | 0.9891 | 2022-02-10 | 2022-08-10 | |
CVE-2017-8464 |
Microsoft | Windows | — | 0.9003 | 2022-02-10 | 2022-08-10 | |
CVE-2017-10271 |
Oracle | WebLogic Server | — | 0.9999 | 2022-02-10 | 2022-08-10 | RW |
CVE-2017-0263 |
Microsoft | Win32k | — | 0.1003 | 2022-02-10 | 2022-08-10 | |
CVE-2017-0262 |
Microsoft | Office | — | 0.8101 | 2022-02-10 | 2022-08-10 | |
CVE-2017-0145 |
Microsoft | SMBv1 | — | 0.8985 | 2022-02-10 | 2022-08-10 | RW |
CVE-2017-0144 |
Microsoft | SMBv1 | — | 0.9923 | 2022-02-10 | 2022-08-10 | RW |
CVE-2016-3088 |
Apache | ActiveMQ | — | 0.9852 | 2022-02-10 | 2022-08-10 | |
CVE-2015-2051 |
D-Link | DIR-645 Router | — | 0.9710 | 2022-02-10 | 2022-08-10 | |
CVE-2015-1635 |
Microsoft | HTTP.sys | — | 1.0000 | 2022-02-10 | 2022-08-10 | |
CVE-2015-1130 |
Apple | OS X | — | 0.0989 | 2022-02-10 | 2022-08-10 | |
CVE-2014-4404 |
Apple | OS X | — | 0.4892 | 2022-02-10 | 2022-08-10 | |
CVE-2022-21882 |
Microsoft | Win32k | — | 0.5920 | 2022-02-04 | 2022-02-18 | RW |
CVE-2022-22587 |
Apple | iOS and macOS | — | 0.1164 | 2022-01-28 | 2022-02-11 | |
CVE-2021-20038 |
SonicWall | SMA 100 Appliances | — | 0.9991 | 2022-01-28 | 2022-02-11 | RW |
CVE-2020-5722 |
Grandstream | UCM6200 | — | 0.8429 | 2022-01-28 | 2022-07-28 | |
CVE-2020-0787 |
Microsoft | Windows | — | 0.4252 | 2022-01-28 | 2022-07-28 | RW |
CVE-2017-5689 |
Intel | Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | — | 0.9219 | 2022-01-28 | 2022-07-28 | |
CVE-2014-1776 |
Microsoft | Internet Explorer | — | 0.8268 | 2022-01-28 | 2022-07-28 | |
CVE-2014-6271 |
GNU | Bourne-Again Shell (Bash) | — | 1.0000 | 2022-01-28 | 2022-07-28 | |
CVE-2014-7169 |
GNU | Bourne-Again Shell (Bash) | — | 0.9994 | 2022-01-28 | 2022-07-28 | |
CVE-2006-1547 |
Apache | Struts 1 | — | 0.5464 | 2022-01-21 | 2022-07-21 | |
CVE-2012-0391 |
Apache | Struts 2 | — | 0.7560 | 2022-01-21 | 2022-07-21 | |
CVE-2018-8453 |
Microsoft | Win32k | — | 0.7004 | 2022-01-21 | 2022-07-21 | RW |
CVE-2021-35247 |
SolarWinds | Serv-U | — | 0.0345 | 2022-01-21 | 2022-02-04 | |
CVE-2021-32648 |
October CMS | October CMS | — | 0.9042 | 2022-01-18 | 2022-02-01 | |
CVE-2021-25296 |
Nagios | Nagios XI | — | 0.7194 | 2022-01-18 | 2022-02-01 | |
CVE-2021-25297 |
Nagios | Nagios XI | — | 0.5666 | 2022-01-18 | 2022-02-01 | |
CVE-2021-25298 |
Nagios | Nagios XI | — | 0.7364 | 2022-01-18 | 2022-02-01 | |
CVE-2021-40870 |
Aviatrix | Aviatrix Controller | — | 0.9302 | 2022-01-18 | 2022-02-01 | |
CVE-2021-33766 |
Microsoft | Exchange Server | — | 0.9818 | 2022-01-18 | 2022-02-01 | |
CVE-2021-21975 |
VMware | vRealize Operations Manager API | — | 0.7800 | 2022-01-18 | 2022-02-01 | RW |
CVE-2021-21315 |
Npm package | System Information Library for Node.JS | — | 0.9067 | 2022-01-18 | 2022-02-01 | |
CVE-2021-22991 |
F5 | BIG-IP Traffic Management Microkernel | — | 0.6242 | 2022-01-18 | 2022-02-01 | |
CVE-2020-14864 |
Oracle | Intelligence Enterprise Edition | — | 0.9723 | 2022-01-18 | 2022-07-18 | |
CVE-2020-13671 |
Drupal | Drupal core | — | 0.3617 | 2022-01-18 | 2022-07-18 | |
CVE-2020-11978 |
Apache | Airflow | — | 0.9919 | 2022-01-18 | 2022-07-18 | |
CVE-2020-13927 |
Apache | Airflow's Experimental API | — | 0.9978 | 2022-01-18 | 2022-07-18 | |
CVE-2021-22017 |
VMware | vCenter Server | — | 0.4918 | 2022-01-10 | 2022-01-24 | |
CVE-2021-36260 |
Hikvision | Security cameras web server | — | 0.9987 | 2022-01-10 | 2022-01-24 | |
CVE-2020-6572 |
Chrome Media | — | 0.1059 | 2022-01-10 | 2022-07-10 | ||
CVE-2019-1458 |
Microsoft | Win32k | — | 0.7444 | 2022-01-10 | 2022-07-10 | RW |
CVE-2013-3900 |
Microsoft | WinVerifyTrust function | — | 0.4465 | 2022-01-10 | 2022-07-10 | |
CVE-2019-2725 |
Oracle | WebLogic Server | — | 0.9998 | 2022-01-10 | 2022-07-10 | RW |
CVE-2019-9670 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.9999 | 2022-01-10 | 2022-07-10 | |
CVE-2018-13382 |
Fortinet | FortiOS and FortiProxy | — | 0.8169 | 2022-01-10 | 2022-07-10 | RW |
CVE-2018-13383 |
Fortinet | FortiOS and FortiProxy | — | 0.3247 | 2022-01-10 | 2022-07-10 | RW |
CVE-2019-1579 |
Palo Alto Networks | PAN-OS | — | 0.4416 | 2022-01-10 | 2022-07-10 | RW |
CVE-2019-10149 |
Exim | Mail Transfer Agent (MTA) | — | 0.9996 | 2022-01-10 | 2022-07-10 | |
CVE-2015-7450 |
IBM | WebSphere Application Server and Server Hypervisor Edition | — | 0.9776 | 2022-01-10 | 2022-07-10 |