CISA Known Exploited Vulnerabilities
KEV additions — September 2022
14 CVEs entered the KEV catalog in September 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added September 30, 20223
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 8.8 | 99.2 % | Oct 21, 2022 |
| CVE-2022-41040ransomware | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 8.8 | 100.0 % | Oct 21, 2022 |
| CVE-2022-41082ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 8 | 100.0 % | Oct 21, 2022 |
Added September 23, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-3236 | Sophos Firewall Code Injection Vulnerability | 9.8 | 98.9 % | Oct 14, 2022 |
Added September 22, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 9.8 | 99.9 % | Oct 13, 2022 |
Added September 15, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 7.2 | 3.3 % | Oct 6, 2022 |
Added September 14, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 7.8 | 5.6 % | Oct 5, 2022 |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 28.3 % | Oct 5, 2022 |
Added September 8, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-13374ransomware | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 4.3 | 38.1 % | Sep 29, 2022 |
| CVE-2018-2628 | Oracle WebLogic Server Unspecified Vulnerability | 9.8 | 100.0 % | Sep 29, 2022 |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 5.5 | 3.2 % | Sep 29, 2022 |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | 9.8 | 91.6 % | Sep 29, 2022 |
| CVE-2022-27593ransomware | QNAP Photo Station Externally Controlled Reference Vulnerability | 9.1 | 87.9 % | Sep 29, 2022 |
| CVE-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | 9.6 | 5.8 % | Sep 29, 2022 |