CISA Known Exploited Vulnerabilities
KEV additions — August 2023
8 CVEs entered the KEV catalog in August 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added August 24, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-32315 | Ignite Realtime Openfire Path Traversal Vulnerability | 7.5 | 100.0 % | Sep 14, 2023 |
| CVE-2023-38831ransomware | RARLAB WinRAR Code Execution Vulnerability | 7.8 | 99.8 % | Sep 14, 2023 |
Added August 22, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-27532ransomware | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | — | 81.3 % | Sep 12, 2023 |
| CVE-2023-38035ransomware | Ivanti Sentry Authentication Bypass Vulnerability | 9.8 | 100.0 % | Sep 12, 2023 |
Added August 21, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-26359 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 17.0 % | Sep 11, 2023 |
Added August 16, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 9.8 | 97.3 % | Sep 6, 2023 |
Added August 9, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 7.5 | 14.0 % | Aug 30, 2023 |
Added August 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2017-18368 | Zyxel P660HN-T1A Routers Command Injection Vulnerability | 9.8 | 94.4 % | Aug 28, 2023 |