CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2020-1464

Microsoft Windows Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-1472

Microsoft Netlogon Privilege Escalation Vulnerability

Microsoft · Netlogonremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1087.002secondary impact T1087.002primary impact T1133secondary impact T1021primary impact T1110exploitation T1486secondary impact T1068primary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-14750

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-14871

Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

Oracle · Solaris and Zettabyte File System (ZFS)remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-14882

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-14883

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-15505

Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

Ivanti · MobileIron Multiple Productsremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-15999

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Google · Chrome FreeTyperemediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2020-16009

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-16010

Google Chrome for Android UI Heap Buffer Overflow Vulnerability

Google · Chrome for Android UIremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-16013

Google Chromium V8 Incorrect Implementation Vulnerabililty

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-16017

Google Chrome Use-After-Free Vulnerability

Google · Chromeremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-16846

SaltStack Salt Shell Injection Vulnerability

SaltStack · Saltremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-17087

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-17144

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-17496

vBulletin PHP Module Remote Code Execution Vulnerability

vBulletin · vBulletinremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-17530

Apache Struts Remote Code Execution Vulnerability

Apache · Strutsremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-24557

Trend Micro Multiple Products Improper Access Control Vulnerability

Trend Micro · Apex One, OfficeScan, and Worry-Free Business Securityremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-25213

WordPress File Manager Plugin Remote Code Execution Vulnerability

WordPress · File Manager Pluginremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-25506

D-Link DNS-320 Device Command Injection Vulnerability

D-Link · DNS-320 Deviceremediation: past CISA due date

ATT&CKT1059primary impact T1584.005secondary impact T1133exploitation

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-2555

Oracle Multiple Products Remote Code Execution Vulnerability

Oracle · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-26919

Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

NETGEAR · JGS516PE Devicesremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-27930

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-27932

Apple Multiple Products Type Confusion Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-27950

Apple Multiple Products Memory Initialization Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-29557

D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability

D-Link · DIR-825 R1 Devicesremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact T1584.005secondary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-29583

Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

Zyxel · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3118

Cisco IOS XR Software Discovery Protocol Format String Vulnerability

Cisco · IOS XRremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3161

Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability

Cisco · Cisco IP Phonesremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3452

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)remediation: past CISA due date

ATT&CKT1202exploitation T1005primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3566

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Cisco · IOS XRremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3569

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Cisco · IOS XRremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3580

Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1217secondary impact T1204.001exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3950

VMware Multiple Products Privilege Escalation Vulnerability

VMware · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3952

VMware vCenter Server Information Disclosure Vulnerability

VMware · vCenter Serverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-3992

VMware ESXi OpenSLP Use-After-Free Vulnerability

VMware · ESXiremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-4006

Multiple VMware Products Command Injection Vulnerability

VMware · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-4427

IBM Data Risk Manager Security Bypass Vulnerability

IBM · Data Risk Managerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-4428

IBM Data Risk Manager Remote Code Execution Vulnerability

IBM · Data Risk Managerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-4430

IBM Data Risk Manager Directory Traversal Vulnerability

IBM · Data Risk Managerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-5735

Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

Amcrest · Cameras and Network Video Recorder (NVR)remediation: past CISA due date

ATT&CKT1574primary impact T1499secondary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-5847

Unraid Remote Code Execution Vulnerability

Unraid · Unraidremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-5849

Unraid Authentication Bypass Vulnerability

Unraid · Unraidremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-5902

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

F5 · BIG-IPremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1003secondary impact T1562.001secondary impact T1070.004secondary impact T1133exploitation T1552secondary impact T1005secondary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-6207

SAP Solution Manager Missing Authentication for Critical Function Vulnerability

SAP · Solution Managerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-6287

SAP NetWeaver Missing Authentication for Critical Function Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-6418

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-6819

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla · Firefox and Thunderbirdremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-6820

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla · Firefox and Thunderbirdremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-7961

Liferay Portal Deserialization of Untrusted Data Vulnerability

Liferay · Liferay Portalremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

1,551–1,600 of ~1,722

← Prev Next →