CISA Known Exploited Vulnerabilities
41 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2016-3081 |
Apache | Struts | — | — | 2026-10-08 | 2026-10-11 | |
CVE-2026-34486 |
Apache | Tomcat | — | 0.9850 | 2026-08-04 | 2026-08-07 | |
CVE-2026-34197 |
Apache | ActiveMQ | — | 0.9826 | 2026-04-16 | 2026-04-30 | |
CVE-2024-38475 |
Apache | HTTP Server | — | 0.9996 | 2025-05-01 | 2025-05-22 | |
CVE-2025-24813 |
Apache | Tomcat | — | 0.9994 | 2025-04-01 | 2025-04-22 | |
CVE-2024-45195 |
Apache | OFBiz | — | 0.9998 | 2025-02-04 | 2025-02-25 | |
CVE-2024-27348 |
Apache | HugeGraph-Server | — | 0.9921 | 2024-09-18 | 2024-10-09 | |
CVE-2024-38856 |
Apache | OFBiz | — | 0.9943 | 2024-08-27 | 2024-09-17 | |
CVE-2024-32113 |
Apache | OFBiz | — | 0.9992 | 2024-08-07 | 2024-08-28 | |
CVE-2020-17519 |
Apache | Flink | — | — | 2024-05-23 | 2024-06-13 | |
CVE-2023-27524 |
Apache | Superset | — | 0.9815 | 2024-01-08 | 2024-01-29 | |
CVE-2023-46604 |
Apache | ActiveMQ | — | 0.9999 | 2023-11-02 | 2023-11-23 | RW |
CVE-2023-33246 |
Apache | RocketMQ | — | 0.9657 | 2023-09-06 | 2023-09-27 | |
CVE-2016-8735 |
Apache | Tomcat | — | — | 2023-05-12 | 2023-06-02 | |
CVE-2021-45046 |
Apache | Log4j2 | — | — | 2023-05-01 | 2023-05-22 | RW |
CVE-2022-33891 |
Apache | Spark | — | 0.9324 | 2023-03-07 | 2023-03-28 | |
CVE-2022-24706 |
Apache | CouchDB | — | — | 2022-08-25 | 2022-09-15 | |
CVE-2022-24112 |
Apache | APISIX | — | — | 2022-08-25 | 2022-09-15 | |
CVE-2020-1956 |
Apache | Kylin | — | — | 2022-03-25 | 2022-04-15 | |
CVE-2017-12617 |
Apache | Tomcat | — | — | 2022-03-25 | 2022-04-15 | |
CVE-2017-12615 |
Apache | Tomcat | — | — | 2022-03-25 | 2022-04-15 | RW |
CVE-2013-2251 |
Apache | Struts | — | — | 2022-03-25 | 2022-04-15 | |
CVE-2020-1938 |
Apache | Tomcat | — | — | 2022-03-03 | 2022-03-17 | |
CVE-2017-9791 |
Apache | Struts 1 | — | — | 2022-02-10 | 2022-08-10 | |
CVE-2016-3088 |
Apache | ActiveMQ | — | — | 2022-02-10 | 2022-08-10 | |
CVE-2006-1547 |
Apache | Struts 1 | — | — | 2022-01-21 | 2022-07-21 | |
CVE-2012-0391 |
Apache | Struts 2 | — | — | 2022-01-21 | 2022-07-21 | |
CVE-2020-11978 |
Apache | Airflow | — | — | 2022-01-18 | 2022-07-18 | |
CVE-2020-13927 |
Apache | Airflow's Experimental API | — | — | 2022-01-18 | 2022-07-18 | |
CVE-2019-0193 |
Apache | Solr | — | — | 2021-12-10 | 2022-06-10 | |
CVE-2021-44228 |
Apache | Log4j2 | — | — | 2021-12-10 | 2021-12-24 | RW |
CVE-2021-40438 |
Apache | Apache | — | — | 2021-12-01 | 2021-12-15 | RW |
CVE-2017-9805 |
Apache | Struts | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-42013 |
Apache | HTTP Server | — | — | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-41773 |
Apache | HTTP Server | — | — | 2021-11-03 | 2021-11-17 | RW |
CVE-2019-0211 |
Apache | HTTP Server | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2016-4437 |
Apache | Shiro | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2019-17558 |
Apache | Solr | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2020-17530 |
Apache | Struts | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2017-5638 |
Apache | Struts | — | — | 2021-11-03 | 2022-05-03 | RW |
CVE-2018-11776 |
Apache | Struts | — | — | 2021-11-03 | 2022-05-03 |