Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2018-0174 | Cisco IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0173 | Cisco IOS and IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0172 | Cisco IOS and IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0171 | Cisco IOS and IOS XE | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-0167 | Cisco IOS, XR, and XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0161 | Cisco IOS Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0159 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0158 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0155 | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0154 | Cisco IOS Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0151 | Cisco IOS and IOS XE Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0147 | Cisco Secure Access Control System (ACS) | 2022-03-25 | 2022-04-15 | ||
| CVE-2018-0125 | Cisco VPN Routers | 2022-03-25 | 2022-04-15 | ||
| CVE-2018-0101 | Cisco Adaptive Security Appliance Software | 10.0critical | — | — | |
| CVE-2017-9841 | PHPUnit PHPUnit | 2022-02-15 | 2022-08-15 | ||
| CVE-2017-9805 | Apache Struts | 2021-11-03 | 2022-05-03 | ||
| CVE-2017-9791 | Apache Struts 1 | 2022-02-10 | 2022-08-10 | ||
| CVE-2017-9248 | Progress ASP.NET AJAX and Sitefinity | 2021-11-03 | 2022-05-03 | ||
| CVE-2017-8759 | Microsoft .NET Framework | 2021-11-03 | 2022-05-03 | ||
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 2022-08-25 | ||
| CVE-2017-8543 | Microsoft Windows | 2022-05-24 | 2022-06-14 | ||
| CVE-2017-8540 | Microsoft Malware Protection Engine | 2022-03-03 | 2022-03-24 | ||
| CVE-2017-8464 | Microsoft Windows | 2022-02-10 | 2022-08-10 | ||
| CVE-2017-8291 | Artifex Ghostscript | 2022-05-24 | 2022-06-14 |