CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 1h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2019-15107

Webmin Command Injection Vulnerability

Webmin · Webminremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-16920

D-Link Multiple Routers Command Injection Vulnerability

D-Link · Multiple Routersremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-2616

Oracle BI Publisher Unauthorized Access Vulnerability

Oracle · BI Publisher (Formerly XML Publisher)remediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2019-6340

Drupal Core Remote Code Execution Vulnerability

Drupal · Coreremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-1631

Juniper Junos OS Path Traversal Vulnerability

Juniper · Junos OSremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-1956

Apache Kylin OS Command Injection Vulnerability

Apache · Kylinremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-2021

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-2506

QNAP Helpdesk Improper Access Control Vulnerability

QNAP Systems · Helpdeskremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-25223

Sophos SG UTM Remote Code Execution Vulnerability

Sophos · SG UTMremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-5410

VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

VMware Tanzu · Spring Cloud Configuration (Config) Serverremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-7247

OpenSMTPD Remote Code Execution Vulnerability

OpenBSD · OpenSMTPDremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-9054

Zyxel Multiple NAS Devices OS Command Injection Vulnerability

Zyxel · Multiple Network-Attached Storage (NAS) Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2020-9377

D-Link DIR-610 Devices Remote Command Execution

D-Link · DIR-610 Devicesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2021-22941

Citrix ShareFile Improper Access Control Vulnerability

Citrix · ShareFileremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2021-42237

Sitecore XP Remote Command Execution Vulnerability

Sitecore · XPremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2022-21999

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059secondary impact T1078exploitation T1136.001secondary impact T1211secondary impact T1068primary impact

P1added 2022-03-25due 2022-04-15

⋮

CVECVE-2022-26143

MiCollab, MiVoice Business Express Access Control Vulnerability

Mitel · MiCollab, MiVoice Business Expressremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2022-26318

WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

WatchGuard · Firebox and XTM Appliancesremediation: past CISA due date

P2added 2022-03-25due 2022-04-15

⋮

CVECVE-2015-2546

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2016-3309

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2017-0101

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2018-8120

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-0543

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-0841

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1064

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1069

Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft · Task Schedulerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1129

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1132

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1253

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1315

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1322

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2019-1405

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2020-5135

SonicWall SonicOS Buffer Overflow Vulnerability

SonicWall · SonicOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-15due 2022-04-05

⋮

CVECVE-2009-3960

Adobe BlazeDS Information Disclosure Vulnerability

Adobe · BlazeDSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1486primary impact

P1added 2022-03-07due 2022-09-07

⋮

CVECVE-2013-0625

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2013-0629

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation T1202primary impact T1005secondary impact

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2013-0631

Adobe ColdFusion Information Disclosure Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation T1592primary impact

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2016-6277

NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR · Multiple Routersremediation: past CISA due date

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2017-6077

NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR · Wireless Router DGN2200remediation: past CISA due date

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2019-11581

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Jira Server and Data Centerremediation: past CISA due date

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2020-8218

Pulse Connect Secure Code Injection Vulnerability

Pulse Secure · Pulse Connect Secureremediation: past CISA due date

P2added 2022-03-07due 2022-09-07

⋮

CVECVE-2021-21973

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware · vCenter Server and Cloud Foundationremediation: past CISA due date

ATT&CKT1190exploitation T1046primary impact

P2added 2022-03-07due 2022-03-21

⋮

CVECVE-2022-26485

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefoxremediation: past CISA due date

P2added 2022-03-07due 2022-03-21

⋮

CVECVE-2022-26486

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefoxremediation: past CISA due date

P2added 2022-03-07due 2022-03-21

⋮

CVECVE-2002-0367

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2004-0210

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2008-2992

Adobe Reader and Acrobat Input Validation Vulnerability

Adobe · Acrobat and Readerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002exploitation

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2008-3431

Oracle VirtualBox Insufficient Input Validation Vulnerability

Oracle · VirtualBoxremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2009-1123

Microsoft Windows Improper Input Validation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2009-3129

Microsoft Excel Featheader Record Memory Corruption Vulnerability

Microsoft · Excelremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

1,201–1,250 of ~1,722

← Prev Next →