CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 1h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2023-22527

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Atlassian · Confluence Data Center and Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1496primary impact T1221exploitation

P1added 2024-01-24due 2024-02-14

⋮

CVECVE-2024-23222

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-01-23due 2024-02-13

⋮

CVECVE-2023-34048

VMware vCenter Server Out-of-Bounds Write Vulnerability

VMware · vCenter Serverremediation: past CISA due date

ATT&CKT1203primary impact T1588.001secondary impact

P2added 2024-01-22due 2024-02-12

⋮

CVECVE-2023-35082

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Coreremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-01-18due 2024-02-08

⋮

CVECVE-2023-6548

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Citrix · NetScaler ADC and NetScaler Gatewayremediation: past CISA due date

ATT&CKT1055exploitation

P2added 2024-01-17due 2024-01-24

⋮

CVECVE-2023-6549

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and NetScaler Gatewayremediation: past CISA due date

ATT&CKT1499primary impact T1574exploitation

P2added 2024-01-17due 2024-02-07

⋮

CVECVE-2024-0519

Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2024-01-17due 2024-02-07

⋮

CVECVE-2018-15133

Laravel Deserialization of Untrusted Data Vulnerability

Laravel · Laravel Frameworkremediation: past CISA due date

P2added 2024-01-16due 2024-02-06

⋮

CVECVE-2023-29357

Microsoft SharePoint Server Privilege Escalation Vulnerability

Microsoft · SharePoint Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-01-10due 2024-01-31

⋮

CVECVE-2023-46805

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

Ivanti · Connect Secure and Policy Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1078primary impact T1555secondary impact T1505.003secondary impact

P1added 2024-01-10due 2024-01-22

⋮

CVECVE-2024-21887

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti · Connect Secure and Policy Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1505.003secondary impact T1552secondary impact

P1added 2024-01-10due 2024-01-22

⋮

CVECVE-2016-20017

D-Link DSL-2750B Devices Command Injection Vulnerability

D-Link · DSL-2750B Devicesremediation: past CISA due date

P2added 2024-01-08due 2024-01-29

⋮

CVECVE-2023-23752

Joomla! Improper Access Control Vulnerability

Joomla! · Joomla!remediation: past CISA due date

P2added 2024-01-08due 2024-01-29

⋮

CVECVE-2023-27524

Apache Superset Insecure Default Initialization of Resource Vulnerability

Apache · Supersetremediation: past CISA due date

ATT&CKT1190exploitation T1078primary impact

P2added 2024-01-08due 2024-01-29

⋮

CVECVE-2023-29300

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusionremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1105primary impact

P1added 2024-01-08due 2024-01-29

⋮

CVECVE-2023-38203

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusionremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1105primary impact

P1added 2024-01-08due 2024-01-29

⋮

CVECVE-2023-41990

Apple Multiple Products Code Execution Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-01-08due 2024-01-29

⋮

CVECVE-2023-7024

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Google · Chromium WebRTCremediation: past CISA due date

ATT&CKT1574primary impact T1189exploitation

P2added 2024-01-02due 2024-01-23

⋮

CVECVE-2023-7101

Spreadsheet::ParseExcel Remote Code Execution Vulnerability

Spreadsheet::ParseExcel · Spreadsheet::ParseExcelremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact T1105secondary impact

P2added 2024-01-02due 2024-01-23

⋮

CVECVE-2023-47565

QNAP VioStor NVR OS Command Injection Vulnerability

QNAP · VioStor NVRremediation: past CISA due date

ATT&CKT1496primary impact T1203exploitation T1498secondary impact

P2added 2023-12-21due 2024-01-11

⋮

CVECVE-2023-49897

FXC AE1021, AE1021PE OS Command Injection Vulnerability

FXC · AE1021, AE1021PEremediation: past CISA due date

ATT&CKT1496primary impact T1203exploitation T1498secondary impact

P2added 2023-12-21due 2024-01-11

⋮

CVECVE-2023-6448

Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

Unitronics · Vision PLC and HMIremediation: past CISA due date

P2added 2023-12-11due 2023-12-18

⋮

CVECVE-2023-41265

Qlik Sense HTTP Tunneling Vulnerability

Qlik · Senseremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-12-07due 2023-12-28

⋮

CVECVE-2023-41266

Qlik Sense Path Traversal Vulnerability

Qlik · Senseremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-12-07due 2023-12-28

⋮

CVECVE-2022-22071

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsetsremediation: past CISA due date

P2added 2023-12-05due 2023-12-26

⋮

CVECVE-2023-33063

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsetsremediation: past CISA due date

P2added 2023-12-05due 2023-12-26

⋮

CVECVE-2023-33106

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Qualcomm · Multiple Chipsetsremediation: past CISA due date

P2added 2023-12-05due 2023-12-26

⋮

CVECVE-2023-33107

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Qualcomm · Multiple Chipsetsremediation: past CISA due date

P2added 2023-12-05due 2023-12-26

⋮

CVECVE-2023-42916

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-12-04due 2023-12-25

⋮

CVECVE-2023-42917

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-12-04due 2023-12-25

⋮

CVECVE-2023-49103

ownCloud graphapi Information Disclosure Vulnerability

ownCloud · ownCloud graphapiremediation: past CISA due date

ATT&CKT1190exploitation T1552primary impact T1005primary impact

P2added 2023-11-30due 2023-12-21

⋮

CVECVE-2023-6345

Google Skia Integer Overflow Vulnerability

Google · Chromium Skiaremediation: past CISA due date

P2added 2023-11-30due 2023-12-21

⋮

CVECVE-2023-4911

GNU C Library Buffer Overflow Vulnerability

GNU · GNU C Libraryremediation: past CISA due date

P2added 2023-11-21due 2023-12-12

⋮

CVECVE-2020-2551

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middlewareremediation: past CISA due date

P2added 2023-11-16due 2023-12-07

⋮

CVECVE-2023-1671

Sophos Web Appliance Command Injection Vulnerability

Sophos · Web Applianceremediation: past CISA due date

P2added 2023-11-16due 2023-12-07

⋮

CVECVE-2023-36584

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-11-16due 2023-12-07

⋮

CVECVE-2023-36025

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-11-14due 2023-12-05

⋮

CVECVE-2023-36033

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-11-14due 2023-12-05

⋮

CVECVE-2023-36036

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-11-14due 2023-12-05

⋮

CVECVE-2023-36844

Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

Juniper · Junos OSremediation: past CISA due date

ATT&CKT1190primary impact T1203exploitation

P2added 2023-11-13due 2023-11-17

⋮

CVECVE-2023-36845

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper · Junos OSremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-11-13due 2023-11-17

⋮

CVECVE-2023-36846

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OSremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-11-13due 2023-11-17

⋮

CVECVE-2023-36847

Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OSremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-11-13due 2023-11-17

⋮

CVECVE-2023-36851

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OSremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-11-13due 2023-11-17

⋮

CVECVE-2023-47246

SysAid Server Path Traversal Vulnerability

SysAid · SysAid Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-11-13due 2023-12-04

⋮

CVECVE-2023-29552

Service Location Protocol (SLP) Denial-of-Service Vulnerability

IETF · Service Location Protocol (SLP)remediation: past CISA due date

P2added 2023-11-08due 2023-11-29

⋮

CVECVE-2023-22518

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Atlassian · Confluence Data Center and Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1105secondary impact T1033primary impact

P1added 2023-11-07due 2023-11-28

⋮

CVECVE-2023-46604

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

Apache · ActiveMQremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1053.005secondary impact T1190exploitation T1059.004primary impact

P1added 2023-11-02due 2023-11-23

⋮

CVECVE-2023-46747

F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

F5 · BIG-IP Configuration Utilityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-10-31due 2023-11-21

⋮

CVECVE-2023-46748

F5 BIG-IP Configuration Utility SQL Injection Vulnerability

F5 · BIG-IP Configuration Utilityremediation: past CISA due date

P2added 2023-10-31due 2023-11-21

⋮

651–700 of ~1,722

← Prev Next →