CISA Known Exploited Vulnerabilities
Vulnerabilities CISA has confirmed are being actively exploited. These are the top priority — federal agencies have a mandated patch-by date, and so should you. 1,716 entries.
| CVE | Added | Patch by | EPSS | CVSS | Ransomware | What |
|---|---|---|---|---|---|---|
| CVE-2020-14883 | 2021-11-03 | 2022-05-03 | 97.9% | — | Oracle WebLogic Server contains an unspecified vulnerability in the Co… | |
| CVE-2021-21972 | 2021-11-03 | 2021-11-17 | 99.9% | 9.8 | yes | The vSphere Client (HTML5) contains a remote code execution vulnerabil… |
| CVE-2021-20090 | 2021-11-03 | 2021-11-17 | 100.0% | — | Arcadyan Buffalo firmware contains a path traversal vulnerability that… | |
| CVE-2021-21220 | 2021-11-03 | 2021-11-17 | 70.4% | — | Google Chromium V8 Engine contains an improper input validation vulner… | |
| CVE-2021-21224 | 2021-11-03 | 2021-11-17 | 84.2% | — | Google Chromium V8 Engine contains a type confusion vulnerability that… | |
| CVE-2020-12812 | 2021-11-03 | 2022-05-03 | 49.3% | 9.8 | yes | An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, … |
| CVE-2020-12271 | 2021-11-03 | 2022-05-03 | 42.4% | — | yes | Sophos Firewall operating system (SFOS) firmware contains a SQL inject… |
| CVE-2020-1380 | 2021-11-03 | 2022-05-03 | 24.2% | — | Microsoft Internet Explorer contains a memory corruption vulnerability… | |
| CVE-2020-1464 | 2021-11-03 | 2022-05-03 | 38.9% | — | Microsoft Windows contains a spoofing vulnerability when Windows incor… | |
| CVE-2020-10181 | 2021-11-03 | 2022-05-03 | 14.7% | — | Sumavision Enhanced Multimedia Router (EMR) contains a cross-site requ… | |
| CVE-2020-10148 | 2021-11-03 | 2022-05-03 | 92.0% | — | SolarWinds Orion API contains an authentication bypass vulnerability t… | |
| CVE-2020-0688 | 2021-11-03 | 2022-05-03 | 100.0% | — | yes | Microsoft Exchange Server Validation Key fails to properly create uniq… |
| CVE-2020-0683 | 2021-11-03 | 2022-05-03 | 7.7% | — | Microsoft Windows Installer contains a privilege escalation vulnerabil… | |
| CVE-2020-0069 | 2021-11-03 | 2022-05-03 | 1.4% | — | Multiple MediaTek chipsets contain an insufficient input validation vu… | |
| CVE-2020-0041 | 2021-11-03 | 2022-05-03 | 3.2% | — | Android Kernel binder_transaction of binder.c contains an out-of-bound… | |
| CVE-2019-9978 | 2021-11-03 | 2022-05-03 | 72.9% | — | WordPress Social Warfare plugin contains a cross-site scripting (XSS) … |
← Prev Page 18 of 18