CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2020-8193

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Applianceremediation: past CISA due date

ATT&CKT1556exploitation T1005primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8195

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Applianceremediation: past CISA due date

ATT&CKT1056exploitation T1082primary impact T1005primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8196

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Applianceremediation: past CISA due date

ATT&CKT1056exploitation T1082primary impact T1005secondary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8243

Ivanti Pulse Connect Secure Code Execution Vulnerability

Ivanti · Pulse Connect Secureremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8260

Ivanti Pulse Connect Secure Code Execution Vulnerability

Ivanti · Pulse Connect Secureremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8467

Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

Trend Micro · Apex One and OfficeScanremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8468

Trend Micro Multiple Products Content Validation Escape Vulnerability

Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agentsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8515

Multiple DrayTek Vigor Routers Web Management Page Vulnerability

DrayTek · Multiple Vigor Routersremediation: past CISA due date

ATT&CKT1496secondary impact T1059primary impact T1133exploitation

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8599

Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

Trend Micro · Apex One and OfficeScanremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8644

PlaySMS Server-Side Template Injection Vulnerability

PlaySMS · PlaySMSremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8655

EyesOfNetwork Improper Privilege Management Vulnerability

EyesOfNetwork · EyesOfNetworkremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-8657

EyesOfNetwork Use of Hard-Coded Credentials Vulnerability

EyesOfNetwork · EyesOfNetworkremediation: past CISA due date

ATT&CKT1106exploitation

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-9818

Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

Apple · iOS, iPadOS, and watchOSremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-9819

Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

Apple · iOS, iPadOS, and watchOSremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2020-9859

Apple Multiple Products Code Execution Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-1497

Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

Cisco · HyperFlex HXremediation: past CISA due date

ATT&CKT1059primary impact T1133exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1498

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Cisco · HyperFlex HXremediation: past CISA due date

ATT&CKT1059primary impact T1133exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1647

Microsoft Defender Remote Code Execution Vulnerability

Microsoft · Defenderremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1675

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1732

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1782

Apple Multiple Products Race Condition Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1870

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1871

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1879

Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

Apple · iOS, iPadOS, and watchOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-1905

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsetsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-1906

Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability

Qualcomm · Multiple Chipsetsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-20016

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

SonicWall · SSLVPN SMA100remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-20021

SonicWall Email Security Improper Privilege Management Vulnerability

SonicWall · SonicWall Email Securityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-20022

SonicWall Email Security Unrestricted Upload of File Vulnerability

SonicWall · SonicWall Email Securityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-20023

SonicWall Email Security Path Traversal Vulnerability

SonicWall · SonicWall Email Securityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-20090

Arcadyan Buffalo Firmware Path Traversal Vulnerability

Arcadyan · Buffalo Firmwareremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21017

Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21148

Google Chromium V8 Heap Buffer Overflow Vulnerability

Google · Chromium V8remediation: past CISA due date

ATT&CKT1203primary impact T1059.007exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21166

Google Chromium Race Condition Vulnerability

Google · Chromiumremediation: past CISA due date

ATT&CKT1203primary impact T1059.007exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21193

Google Chromium Blink Use-After-Free Vulnerability

Google · Chromium Blinkremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21206

Google Chromium Blink Use-After-Free Vulnerability

Google · Chromium Blinkremediation: past CISA due date

ATT&CKT1203exploitation T1059.007exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21220

Google Chromium V8 Improper Input Validation Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21224

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21972

VMware vCenter Server Remote Code Execution Vulnerability

VMware · vCenter Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-21985

VMware vCenter Server Improper Input Validation Vulnerability

VMware · vCenter Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-22005

VMware vCenter Server File Upload Vulnerability

VMware · vCenter Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-22205

GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

GitLab · Community and Enterprise Editionsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1496secondary impact T1059primary impact T1498primary impact T1498secondary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-22502

Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

Micro Focus · Operation Bridge Reporter (OBR)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-22506

Micro Focus Access Manager Information Leakage Vulnerability

Micro Focus · Micro Focus Access Managerremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-22893

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti · Pulse Connect Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1003secondary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-22894

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti · Pulse Connect Secureremediation: past CISA due date

ATT&CKT1059primary impact T1078exploitation

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-22899

Ivanti Pulse Connect Secure Command Injection Vulnerability

Ivanti · Pulse Connect Secureremediation: past CISA due date

ATT&CKT1078exploitation T1059.003primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-22900

Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Ivanti · Pulse Connect Secureremediation: past CISA due date

ATT&CKT1059exploitation T1068primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-22986

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 · BIG-IP and BIG-IQ Centralized Managementremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1485secondary impact T1059primary impact T1090primary impact T1133exploitation

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-23874

McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

McAfee · McAfee Total Protection (MTP)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

1,601–1,650 of ~1,722

← Prev Next →