CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2016-9563

SAP NetWeaver XML External Entity (XXE) Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-0143

Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-0199

Microsoft Office and WordPad Remote Code Execution Vulnerability

Microsoft · Office and WordPadremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-11774

Microsoft Office Outlook Security Feature Bypass Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-11882

Microsoft Office Memory Corruption Vulnerability

Microsoft · Officeremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1566.001exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-16651

Roundcube Webmail File Disclosure Vulnerability

Roundcube · Roundcube Webmailremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-5638

Apache Struts Remote Code Execution Vulnerability

Apache · Strutsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1005secondary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-6327

Symantec Messaging Gateway Remote Code Execution Vulnerability

Symantec · Symantec Messaging Gatewayremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-7269

Microsoft Windows Server Buffer Overflow Vulnerability

Microsoft · Internet Information Services (IIS)remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-8759

Microsoft .NET Framework Remote Code Execution Vulnerability

Microsoft · .NET Frameworkremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-9248

Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

Progress · ASP.NET AJAX and Sitefinityremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-9805

Apache Struts Deserialization of Untrusted Data Vulnerability

Apache · Strutsremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2017-9822

DotNetNuke (DNN) Remote Code Execution Vulnerability

DotNetNuke (DNN) · DotNetNuke (DNN)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1496secondary impact T1059primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-0171

Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Cisco · IOS and IOS XEremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-0296

Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

Cisco · Adaptive Security Appliance (ASA)remediation: past CISA due date

ATT&CKT1202exploitation T1005primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-0798

Microsoft Office Memory Corruption Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-0802

Microsoft Office Memory Corruption Vulnerability

Microsoft · Officeremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-11776

Apache Struts Remote Code Execution Vulnerability

Apache · Strutsremediation: past CISA due date

ATT&CKT1190exploitation T1496secondary impact T1059primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-13379

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

Fortinet · FortiOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-14558

Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

Tenda · AC7, AC9, and AC10 Routersremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-15811

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) · DotNetNuke (DNN)remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-15961

Adobe ColdFusion Unrestricted File Upload Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation T1491.002primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-18325

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) · DotNetNuke (DNN)remediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-20062

ThinkPHP "noneCms" Remote Code Execution Vulnerability

ThinkPHP · noneCmsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-2380

SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

SAP · Customer Relationship Management (CRM)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-4878

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002exploitation T1041secondary impact T1219primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-4939

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190primary impact T1203exploitation T1133primary impact

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-6789

Exim Buffer Overflow Vulnerability

Exim · Eximremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-7600

Drupal Core Remote Code Execution Vulnerability

Drupal · Drupal Coreremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1485secondary impact T1496secondary impact T1059primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2018-8653

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0211

Apache HTTP Server Privilege Escalation Vulnerability

Apache · HTTP Serverremediation: past CISA due date

ATT&CKT1068exploitation

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0541

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft · MSHTMLremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0604

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft · SharePointremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1041primary impact T1608.001primary impact T1003secondary impact T1505.003primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0708

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft · Remote Desktop Servicesremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1498secondary impact T1059.004primary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0797

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0803

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0808

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0859

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-0863

Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-11510

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Ivanti · Pulse Connect Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1083secondary impact T1552.001secondary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-11539

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti · Pulse Connect Secure and Pulse Policy Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-11580

Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

Atlassian · Crowd and Crowd Data Centerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-11634

Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Citrix · Workspace Application and Receiver for Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1078secondary impact T1059primary impact T1005secondary impact T1046secondary impact T1003secondary impact T1486secondary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-1214

Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-1215

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-13608

Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability

Citrix · StoreFront Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1078secondary impact T1059primary impact T1003secondary impact T1046secondary impact T1005secondary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-1367

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-1429

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-15752

Docker Desktop Community Edition Privilege Escalation Vulnerability

Docker · Desktop Community Editionremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

CVECVE-2019-15949

Nagios XI Remote Code Execution Vulnerability

Nagios · Nagios XIremediation: past CISA due date

P2added 2021-11-03due 2022-05-03

⋮

1,451–1,500 of ~1,722

← Prev Next →