Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2019-10086 | Apache Commons Beanutils | 7.3high | — | — | |
| CVE-2021-25329 | Apache Tomcat | 7.0high | — | — | |
| CVE-2020-9484 | Apache Tomcat | 7.0high | — | — | |
| CVE-2026-41607 | Apache Thrift | 6.5medium | — | — | |
| CVE-2022-23437 | Apache Xerces-J | 6.5medium | — | — | |
| CVE-2021-45105 | Apache Log4j | 5.9medium | — | — | |
| CVE-2021-24122 | Apache Tomcat | 5.9medium | — | — | |
| CVE-2021-36374 | Apache Ant | 5.5medium | — | — | |
| CVE-2021-36373 | Apache Ant | 5.5medium | — | — | |
| CVE-2020-17521 | Apache Groovy | 5.5medium | — | — | |
| CVE-2026-41606 | Apache Thrift | 5.3medium | — | — | |
| CVE-2021-33037 | Apache Tomcat | 5.3medium | — | — | |
| CVE-2021-29425 | Apache Commons Io | 4.8medium | — | — | |
| CVE-2019-17569 | Apache Tomcat | 4.8medium | — | — |
Page 3 of 3 · 64 entriesPrevious