CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2018-13383

Fortinet FortiOS and FortiProxy Out-of-bounds Write

Fortinet · FortiOS and FortiProxyremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-01-10due 2022-07-10

⋮

CVECVE-2019-10149

Exim Mail Transfer Agent (MTA) Improper Input Validation

Exim · Mail Transfer Agent (MTA)remediation: past CISA due date

P2added 2022-01-10due 2022-07-10

⋮

CVECVE-2019-1458

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-01-10due 2022-07-10

⋮

CVECVE-2019-1579

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-01-10due 2022-07-10

⋮

CVECVE-2019-2725

Oracle WebLogic Server, Injection

Oracle · WebLogic Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-01-10due 2022-07-10

⋮

CVECVE-2019-7609

Kibana Arbitrary Code Execution

Elastic · Kibanaremediation: past CISA due date

P2added 2022-01-10due 2022-07-10

⋮

CVECVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2022-01-10due 2022-07-10

⋮

CVECVE-2020-6572

Google Chrome Media Use-After-Free Vulnerability

Google · Chrome Mediaremediation: past CISA due date

P2added 2022-01-10due 2022-07-10

⋮

CVECVE-2021-22017

VMware vCenter Server Improper Access Control

VMware · vCenter Serverremediation: past CISA due date

ATT&CKT1190exploitation T1090.001primary impact

P2added 2022-01-10due 2022-01-24

⋮

CVECVE-2021-27860

FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit

FatPipe · WARP, IPVPN, and MPVPN softwareremediation: past CISA due date

ATT&CKT1190exploitation T1505.003primary impact

P2added 2022-01-10due 2022-01-24

⋮

CVECVE-2021-36260

Hikvision Improper Input Validation

Hikvision · Security cameras web serverremediation: past CISA due date

P2added 2022-01-10due 2022-01-24

⋮

CVECVE-2021-4102

Google Chromium V8 Use-After-Free Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-12-15due 2021-12-29

⋮

CVECVE-2021-43890

Microsoft Windows AppX Installer Spoofing Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-12-15due 2021-12-29

⋮

CVECVE-2010-1871

Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

Red Hat · JBoss Seam 2remediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2017-12149

Red Hat JBoss Application Server Remote Code Execution Vulnerability

Red Hat · JBoss Application Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-12-10due 2022-06-10

⋮

CVECVE-2017-17562

Embedthis GoAhead Remote Code Execution Vulnerability

Embedthis · GoAheadremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2019-0193

Apache Solr DataImportHandler Code Injection Vulnerability

Apache · Solrremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2019-10758

MongoDB mongo-express Remote Code Execution Vulnerability

MongoDB · mongo-expressremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2019-13272

Linux Kernel Improper Privilege Management Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2019-7238

Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

Sonatype · Nexus Repository Managerremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2020-17463

Fuel CMS SQL Injection Vulnerability

Fuel CMS · Fuel CMSremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2020-8816

Pi-Hole AdminLTE Remote Code Execution Vulnerability

Pi-hole · AdminLTEremediation: past CISA due date

P2added 2021-12-10due 2022-06-10

⋮

CVECVE-2021-35394

Realtek Jungle SDK Remote Code Execution Vulnerability

Realtek · Jungle Software Development Kit (SDK)remediation: past CISA due date

ATT&CKT1190exploitation T1496secondary impact T1059primary impact T1499secondary impact T1569.002secondary impact T1071.001secondary impact T1105secondary impact

P2added 2021-12-10due 2021-12-24

⋮

CVECVE-2021-44168

Fortinet FortiOS Arbitrary File Download

Fortinet · FortiOSremediation: past CISA due date

ATT&CKT1078.003exploitation T1601primary impact

P2added 2021-12-10due 2021-12-24

⋮

CVECVE-2021-44228

Apache Log4j2 Remote Code Execution Vulnerability

Apache · Log4j2remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1496secondary impact T1486secondary impact T1608.001secondary impact T1505.003secondary impact

P1added 2021-12-10due 2021-12-24

⋮

CVECVE-2021-44515

Zoho Desktop Central Authentication Bypass Vulnerability

Zoho · Desktop Centralremediation: past CISA due date

ATT&CKT1190exploitation T1003secondary impact T1069secondary impact T1087secondary impact T1105primary impact

P2added 2021-12-10due 2021-12-24

⋮

CVECVE-2018-14847

MikroTik Router OS Directory Traversal Vulnerability

MikroTik · RouterOSremediation: past CISA due date

P2added 2021-12-01due 2022-06-01

⋮

CVECVE-2020-11261

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearablesremediation: past CISA due date

P2added 2021-12-01due 2022-06-01

⋮

CVECVE-2021-37415

Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

Zoho · ManageEngine ServiceDesk Plus (SDP)remediation: past CISA due date

ATT&CKT1190exploitation

P2added 2021-12-01due 2021-12-15

⋮

CVECVE-2021-40438

Apache HTTP Server-Side Request Forgery (SSRF)

Apache · Apacheremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-12-01due 2021-12-15

⋮

CVECVE-2021-44077

Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plusremediation: past CISA due date

ATT&CKT1087.002secondary impact T1190exploitation T1573.001secondary impact T1560.001secondary impact T1070.004secondary impact T1047secondary impact T1003.003secondary impact T1136secondary impact T1218secondary impact T1003secondary impact T1140

CVECVE-2021-22204

ExifTool Remote Code Execution Vulnerability

Perl · Exiftoolremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2021-11-17due 2021-12-01

⋮

CVECVE-2021-40449

Microsoft Windows Win32k Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1566exploitation T1573.001secondary impact T1071.001secondary impact T1016secondary impact T1082secondary impact T1059.003secondary impact T1027secondary impact T1068primary impact

P1added 2021-11-17due 2021-12-01

⋮

CVECVE-2021-42292

Microsoft Excel Security Feature Bypass

Microsoft · Officeremediation: past CISA due date

P2added 2021-11-17due 2021-12-01

⋮

CVECVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchangeremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1078exploitation

P1added 2021-11-17due 2021-12-01

⋮

CVECVE-2010-5326

SAP NetWeaver Remote Code Execution Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2012-0158

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft · MSCOMCTL.OCXremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2012-3152

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middlewareremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2014-1812

Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2015-1641

Microsoft Office Memory Corruption Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2015-4852

Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-0167

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-0185

Microsoft Windows Media Center Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-3235

Microsoft Office OLE DLL Side Loading Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-3643

SolarWinds Virtualization Manager Privilege Escalation Vulnerability

SolarWinds · Virtualization Managerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-3715

ImageMagick Arbitrary File Deletion Vulnerability

ImageMagick · ImageMagickremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-3718

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

ImageMagick · ImageMagickremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-3976

SAP NetWeaver Directory Traversal Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-4437

Apache Shiro Code Execution Vulnerability

Apache · Shiroremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2016-7255

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

1,401–1,450 of ~1,722

← Prev Next →

secondary impact

T1027secondary impact

T1505.003primary impact

P2added 2021-12-01due 2021-12-15

⋮