Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2018-0171 | Cisco IOS and IOS XE | – | – | |
| CVE-2017-9822 | DotNetNuke (DNN) | – | – | |
| CVE-2017-9805 | Apache Struts | – | – | |
| CVE-2017-9248 | Progress ASP.NET AJAX and Sitefinity | – | – | |
| CVE-2017-8759 | Microsoft .NET Framework | – | – | |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | – | – | |
| CVE-2017-6327 | Symantec Messaging Gateway | – | – | |
| CVE-2017-5638 | Apache Struts | – | – | |
| CVE-2017-16651 | Roundcube Webmail | – | – | |
| CVE-2017-11882 | Microsoft Office | – | – | |
| CVE-2017-11774 | Microsoft Office | – | – | |
| CVE-2017-0199 | Microsoft Office and WordPad | – | – | |
| CVE-2017-0143 | Microsoft Windows | – | – | |
| CVE-2016-9563 | SAP NetWeaver | – | – | |
| CVE-2016-7255 | Microsoft Win32k | – | – | |
| CVE-2016-4437 | Apache Shiro | – | – | |
| CVE-2016-3976 | SAP NetWeaver | – | – | |
| CVE-2016-3718 | ImageMagick | – | – | |
| CVE-2016-3715 | ImageMagick | – | – | |
| CVE-2016-3643 | SolarWinds Virtualization Manager | – | – | |
| CVE-2016-3235 | Microsoft Office | – | – | |
| CVE-2016-0185 | Microsoft Windows | – | – | |
| CVE-2016-0167 | Microsoft Win32k | – | – | |
| CVE-2015-4852 | Oracle WebLogic Server | – | – | |
| CVE-2015-1641 | Microsoft Office | – | – | |
| CVE-2014-1812 | Microsoft Windows | – | – | |
| CVE-2012-3152 | Oracle Fusion Middleware | – | – | |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX | – | – | |
| CVE-2010-5326 | SAP NetWeaver | – | – |