Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 2024-02-08 | ransomware | |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-25 | 2023-08-15 | ransomware | |
| CVE-2023-34362 | Progress MOVEit Transfer | 2023-06-02 | 2023-06-23 | ransomware | |
| CVE-2023-29357 | Microsoft SharePoint Server | 2024-01-10 | 2024-01-31 | ransomware | |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | 2024-01-29 | ransomware | |
| CVE-2023-28461 | Array Networks AG/vxAG ArrayOS | 2024-11-25 | 2024-12-16 | ransomware | |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 2023-05-02 | ransomware | |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | 2023-06-13 | 2023-07-04 | ransomware | |
| CVE-2023-27532 | Veeam Backup & Replication | 2023-08-22 | 2023-09-12 | ransomware | |
| CVE-2023-27351 | PaperCut NG/MF | 2026-04-20 | 2026-05-04 | ransomware | |
| CVE-2023-27350 | PaperCut MF/NG | 2023-04-21 | 2023-05-12 | ransomware | |
| CVE-2023-24955 | Microsoft SharePoint Server | 2024-03-26 | 2024-04-16 | ransomware | |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 2023-04-04 | ransomware | |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 2023-03-07 | ransomware | |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | 2024-01-24 | 2024-02-14 | ransomware | |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | 2023-11-07 | 2023-11-28 | ransomware | |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | 2023-10-05 | 2023-10-13 | ransomware | |
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 2026-04-27 | ransomware | |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense | 2023-09-13 | 2023-10-04 | ransomware | |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 2023-02-10 | 2023-03-03 | ransomware | |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | 2023-03-14 | ransomware | |
| CVE-2022-47966 | Zoho ManageEngine | 2023-01-23 | 2023-02-13 | ransomware | |
| CVE-2022-44698 | Microsoft Defender | 2022-12-13 | 2023-01-03 | ransomware | |
| CVE-2022-42475 | Fortinet FortiOS | 2022-12-13 | 2023-01-03 | ransomware | |
| CVE-2022-41223 | Mitel MiVoice Connect | 2023-02-21 | 2023-03-14 | ransomware |