Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-502
Entries71
Ransomware-linked29
Vendors36
By vendor
14
6
5
4
4
3
2
2
2
2
2
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | 2026-08-26 | 82.5% | Unknown |
| CVE-2026-63077 | JetBrains TeamCity | 2026-08-05 | 89.5% | Known |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 3.0% | Unknown |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 15.8% | Unknown |
| CVE-2026-45659 | Microsoft SharePoint Server | 2026-07-01 | 2.7% | Known |
| CVE-2026-12569 | PTC Windchill and FlexPLM | 2026-06-25 | 46.0% | Known |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 2026-06-03 | 2.0% | Unknown |
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 59.2% | Known |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | 2026-03-19 | 43.1% | Known |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 29.5% | Unknown |
| CVE-2025-26399 | SolarWinds Web Help Desk | 2026-03-09 | 89.5% | Known |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 98.9% | Unknown |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | 84.1% | Unknown |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 99.9% | Unknown |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 99.7% | Known |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 96.9% | Unknown |
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 51.0% | Unknown |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | Unknown |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 99.9% | Known |
| CVE-2025-24016 | Wazuh Wazuh Server | 2025-06-10 | 93.8% | Unknown |
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 13.8% | Known |
| CVE-2025-24813 | Apache Tomcat | 2025-04-01 | 99.9% | Unknown |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 13.7% | Unknown |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 83.7% | Unknown |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | 2025-02-24 | 3.9% | Unknown |
| CVE-2017-3066 | Adobe ColdFusion | 2025-02-24 | 90.5% | Unknown |
| CVE-2025-0994 | Trimble Cityworks | 2025-02-07 | 31.0% | Unknown |
| CVE-2025-23006 | SonicWall SMA1000 Appliances | 2025-01-24 | 23.4% | Known |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 50.8% | Known |
| CVE-2024-40711 | Veeam Backup & Replication | 2024-10-17 | 90.3% | Known |
| CVE-2019-0344 | SAP Commerce Cloud | 2024-09-30 | 7.0% | Unknown |
| CVE-2022-21445 | Oracle ADF Faces | 2024-09-18 | 62.4% | Unknown |
| CVE-2020-0618 | Microsoft SQL Server | 2024-09-18 | 99.0% | Known |
| CVE-2024-28986 | SolarWinds Web Help Desk | 2024-08-15 | 84.6% | Unknown |
| CVE-2018-0824 | Microsoft Windows | 2024-08-05 | 73.1% | Unknown |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect | 2024-05-20 | 82.7% | Known |
| CVE-2018-15133 | Laravel Laravel Framework | 2024-01-16 | 76.8% | Unknown |
| CVE-2023-38203 | Adobe ColdFusion | 2024-01-08 | 97.0% | Known |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | 99.9% | Known |
| CVE-2023-46604 | Apache ActiveMQ | 2023-11-02 | 99.8% | Known |
| CVE-2023-40044 | Progress WS_FTP Server | 2023-10-05 | 90.3% | Known |
| CVE-2023-26359 | Adobe ColdFusion | 2023-08-21 | 16.9% | Unknown |
| CVE-2022-31199 | Netwrix Auditor | 2023-07-11 | 36.0% | Known |
| CVE-2021-39144 | XStream XStream | 2023-03-10 | 98.1% | Unknown |
| CVE-2020-5741 | Plex Media Server | 2023-03-10 | 72.9% | Unknown |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | 99.9% | Known |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 2023-02-10 | 99.9% | Known |
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 96.2% | Unknown |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | 99.9% | Unknown |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 99.9% | Unknown |
| CVE-2021-31010 | Apple iOS, macOS, watchOS | 2022-08-25 | 3.6% | Unknown |
| CVE-2019-15271 | Cisco RV Series Routers | 2022-06-08 | 5.4% | Unknown |
| CVE-2021-27852 | Checkbox Checkbox Survey | 2022-04-11 | 30.2% | Unknown |
| CVE-2021-42237 | Sitecore XP | 2022-03-25 | 97.5% | Known |
| CVE-2019-6340 | Drupal Core | 2022-03-25 | 92.0% | Unknown |
| CVE-2019-10068 | Kentico Xperience | 2022-03-25 | 95.0% | Unknown |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | 2022-02-10 | 98.3% | Unknown |
| CVE-2021-44228 | Apache Log4j2 | 2021-12-10 | 99.9% | Known |
| CVE-2017-12149 | Red Hat JBoss Application Server | 2021-12-10 | 90.7% | Known |
| CVE-2021-42321 | Microsoft Exchange | 2021-11-17 | 91.7% | Known |
| CVE-2021-35464 | ForgeRock Access Management (AM) | 2021-11-03 | 99.9% | Known |
| CVE-2021-26857 | Microsoft Exchange Server | 2021-11-03 | 95.7% | Known |
| CVE-2020-7961 | Liferay Liferay Portal | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-2555 | Oracle Multiple Products | 2021-11-03 | 97.1% | Unknown |
| CVE-2020-17144 | Microsoft Exchange Server | 2021-11-03 | 36.5% | Unknown |
| CVE-2020-10189 | Zoho ManageEngine | 2021-11-03 | 99.9% | Unknown |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX | 2021-11-03 | 99.7% | Known |
| CVE-2018-4939 | Adobe ColdFusion | 2021-11-03 | 61.9% | Unknown |
| CVE-2017-9805 | Apache Struts | 2021-11-03 | 99.3% | Unknown |
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 96.0% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
71 KEV entries are classified as CWE-502. CWE definition (MITRE)