Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2024-28987 | SolarWinds Web Help Desk | 2024-10-15 | 2024-11-05 | ||
| CVE-2024-28986 | SolarWinds Web Help Desk | 2024-08-15 | 2024-09-05 | ||
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 2025-06-09 | ||
| CVE-2024-27348 | Apache HugeGraph-Server | 2024-09-18 | 2024-10-09 | ||
| CVE-2024-23296 | Apple Multiple Products | 2024-03-06 | 2024-03-27 | ||
| CVE-2024-23225 | Apple Multiple Products | 2024-03-06 | 2024-03-27 | ||
| CVE-2024-23222 | Apple Multiple Products | 2024-01-23 | 2024-02-13 | ||
| CVE-2024-23113 | Fortinet Multiple Products | 2024-10-09 | 2024-10-30 | ||
| CVE-2024-21413 | Microsoft Office Outlook | 2025-02-06 | 2025-02-27 | ||
| CVE-2024-21410 | Microsoft Exchange Server | 2024-02-15 | 2024-03-07 | ||
| CVE-2024-21351 | Microsoft Windows | 2024-02-13 | 2024-03-05 | ||
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | 2024-11-21 | 2024-12-12 | ||
| CVE-2024-21182 | Oracle WebLogic Server | 2026-06-01 | 2026-06-04 | ||
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | 2025-02-24 | 2025-03-17 | ||
| CVE-2024-20767 | Adobe ColdFusion | 2024-12-16 | 2025-01-06 | ||
| CVE-2024-20481 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-10-24 | 2024-11-14 | ||
| CVE-2024-20439 | Cisco Smart Licensing Utility | 2025-03-31 | 2025-04-21 | ||
| CVE-2024-20399 | Cisco NX-OS | 2024-07-02 | 2024-07-23 | ||
| CVE-2024-20359 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 2024-05-01 | ||
| CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 2024-05-01 | ||
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 2025-03-31 | ||
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 2025-03-31 | ||
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 2025-03-31 | ||
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | 2025-06-05 | ||
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2025-01-13 | 2025-02-03 |