Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2024-38475 | Apache HTTP Server | – | – | |
| CVE-2023-44221 | SonicWall SMA100 Appliances | – | – | |
| CVE-2025-31324 | SAP NetWeaver | – | – | |
| CVE-2025-42599 | Qualitia Active! Mail | – | – | |
| CVE-2025-3928 | Commvault Web Server | – | – | |
| CVE-2025-1976 | Broadcom Brocade Fabric OS | – | – | |
| CVE-2025-31201 | Apple Multiple Products | – | – | |
| CVE-2025-31200 | Apple Multiple Products | – | – | |
| CVE-2025-24054 | Microsoft Windows | – | – | |
| CVE-2021-20035 | SonicWall SMA100 Appliances | – | – | |
| CVE-2024-53197 | Linux Kernel | – | – | |
| CVE-2024-53150 | Linux Kernel | – | – | |
| CVE-2025-30406 | Gladinet CentreStack | – | – | |
| CVE-2025-29824 | Microsoft Windows | – | – | |
| CVE-2025-31161 | CrushFTP | – | – | |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | – | – | |
| CVE-2025-24813 | Apache Tomcat | – | – | |
| CVE-2024-20439 | Cisco Smart Licensing Utility | – | – | |
| CVE-2025-2783 | Google Chromium Mojo | – | – | |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) | – | – | |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | – | – | |
| CVE-2025-30154 | reviewdog action-setup GitHub Action | – | – | |
| CVE-2025-1316 | Edimax IC-7100 IP Camera | – | – | |
| CVE-2024-48248 | NAKIVO Backup and Replication | – | – | |
| CVE-2017-12637 | SAP NetWeaver | – | – | |
| CVE-2025-30066 | tj-actions changed-files GitHub Action | – | – | |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy | – | – | |
| CVE-2025-24201 | Apple Multiple Products | – | – | |
| CVE-2025-21590 | Juniper Junos OS | – | – | |
| CVE-2025-26633 | Microsoft Windows | – | – | |
| CVE-2025-24993 | Microsoft Windows | – | – | |
| CVE-2025-24991 | Microsoft Windows | – | – | |
| CVE-2025-24985 | Microsoft Windows | – | – | |
| CVE-2025-24984 | Microsoft Windows | – | – | |
| CVE-2025-24983 | Microsoft Windows | – | – | |
| CVE-2025-25181 | Advantive VeraCore | – | – | |
| CVE-2024-57968 | Advantive VeraCore | – | – | |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | – | – | |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | – | – | |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | – | – | |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion | – | – | |
| CVE-2025-22225 | VMware ESXi | – | – | |
| CVE-2025-22224 | VMware ESXi and Workstation | – | – | |
| CVE-2024-50302 | Linux Kernel | – | – | |
| CVE-2024-4885 | Progress WhatsUp Gold | – | – | |
| CVE-2023-20118 | Cisco Small Business RV Series Routers | – | – | |
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | – | – | |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | – | – | |
| CVE-2018-8639 | Microsoft Windows | – | – | |
| CVE-2024-49035 | Microsoft Partner Center | – | – |