CISA Known Exploited Vulnerabilities
KEV additions — September 2022
14 CVEs entered the KEV catalog in September 2022.
Added September 30, 20223
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 8.8 | 94.4 % | October 21, 2022 |
| CVE-2022-41040ransomware | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 8.8 | 94.2 % | October 21, 2022 |
| CVE-2022-41082ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 8 | 91.7 % | October 21, 2022 |
Added September 23, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-3236 | Sophos Firewall Code Injection Vulnerability | 9.8 | 92.4 % | October 14, 2022 |
Added September 22, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 9.8 | 94.3 % | October 13, 2022 |
Added September 15, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 7.2 | 12.9 % | October 6, 2022 |
Added September 14, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 7.8 | 0.5 % | October 5, 2022 |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 12.4 % | October 5, 2022 |
Added September 8, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-13374ransomware | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 4.3 | 1.6 % | September 29, 2022 |
| CVE-2018-2628 | Oracle WebLogic Server Unspecified Vulnerability | 9.8 | 94.4 % | September 29, 2022 |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 5.5 | 2.4 % | September 29, 2022 |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | 9.8 | 87.2 % | September 29, 2022 |
| CVE-2022-27593ransomware | QNAP Photo Station Externally Controlled Reference Vulnerability | 9.1 | 93.0 % | September 29, 2022 |
| CVE-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | 9.6 | 2.1 % | September 29, 2022 |