CISA Known Exploited Vulnerabilities
KEV additions — August 2023
8 CVEs entered the KEV catalog in August 2023.
Added August 24, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-32315 | Ignite Realtime Openfire Path Traversal Vulnerability | 7.5 | 94.4 % | September 14, 2023 |
| CVE-2023-38831ransomware | RARLAB WinRAR Code Execution Vulnerability | 7.8 | 93.8 % | September 14, 2023 |
Added August 22, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-27532ransomware | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | — | 77.6 % | September 12, 2023 |
| CVE-2023-38035ransomware | Ivanti Sentry Authentication Bypass Vulnerability | 9.8 | 94.4 % | September 12, 2023 |
Added August 21, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-26359 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 84.7 % | September 11, 2023 |
Added August 16, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 9.8 | 94.4 % | September 6, 2023 |
Added August 9, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 7.5 | 0.9 % | August 30, 2023 |
Added August 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2017-18368 | Zyxel P660HN-T1A Routers Command Injection Vulnerability | 9.8 | 93.7 % | August 28, 2023 |