Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2020-6207 | SAP Solution Manager | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-5849 | Unraid Unraid | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-5847 | Unraid Unraid | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-5741 | Plex Media Server | 2023-03-10 | 2023-03-31 | ||
| CVE-2020-5735 | Amcrest Cameras and Network Video Recorder (NVR) | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-5722 | Grandstream UCM6200 | 2022-01-28 | 2022-07-28 | ||
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | 2022-03-25 | 2022-04-15 | ||
| CVE-2020-4430 | IBM Data Risk Manager | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-4428 | IBM Data Risk Manager | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-4427 | IBM Data Risk Manager | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-4006 | VMware Multiple Products | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-3952 | VMware vCenter Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-3950 | VMware Multiple Products | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-3837 | Apple Multiple Products | 2022-06-27 | 2022-07-18 | ||
| CVE-2020-36193 | PEAR Archive_Tar | 2022-08-25 | 2022-09-15 | ||
| CVE-2020-35730 | Roundcube Roundcube Webmail | 2023-06-22 | 2023-07-13 | ||
| CVE-2020-3569 | Cisco IOS XR | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-3566 | Cisco IOS XR | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-3161 | Cisco Cisco IP Phones | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-3118 | Cisco IOS XR | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-29583 | Zyxel Multiple Products | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-29557 | D-Link DIR-825 R1 Devices | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-28949 | PEAR Archive_Tar | 2022-08-25 | 2022-09-15 | ||
| CVE-2020-2883 | Oracle WebLogic Server | 2025-01-07 | 2025-01-28 | ||
| CVE-2020-27950 | Apple Multiple Products | 2021-11-03 | 2022-05-03 |