Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2021-27878 | Veritas Backup Exec Agent | 2023-04-07 | 2023-04-28 | ransomware | |
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | 2023-04-28 | ransomware | |
| CVE-2021-27876 | Veritas Backup Exec Agent | 2023-04-07 | 2023-04-28 | ransomware | |
| CVE-2021-27104 | Accellion FTA | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-27103 | Accellion FTA | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-27102 | Accellion FTA | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-27101 | Accellion FTA | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-27065 | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2021-26858 | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2021-26857 | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2021-26855 | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2021-26411 | Microsoft Internet Explorer | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-26085 | Atlassian Confluence Server | 2022-03-28 | 2022-04-18 | ransomware | |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-22941 | Citrix ShareFile | 2022-03-25 | 2022-04-15 | ransomware | |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-22005 | VMware vCenter Server | 2021-11-03 | 2021-11-17 | ransomware | |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | 2022-02-11 | ransomware | |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | 2022-03-28 | 2022-04-18 | ransomware | |
| CVE-2020-5902 | F5 BIG-IP | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2020-5135 | SonicWall SonicOS | 2022-03-15 | 2022-04-05 | ransomware | |
| CVE-2020-2021 | Palo Alto Networks PAN-OS | 2022-03-25 | 2022-04-15 | ransomware | |
| CVE-2020-1472 | Microsoft Netlogon | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2020-12271 | Sophos SFOS | 2021-11-03 | 2022-05-03 | ransomware |