Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-74
Entries12
Ransomware-linked2
Vendors10
By vendor
2
2
1
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 67.9% | Unknown |
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | 97.6% | Unknown |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 97.6% | Unknown |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | 2024-01-24 | 99.9% | Known |
| CVE-2022-35914 | Teclib GLPI | 2023-03-07 | 99.8% | Unknown |
| CVE-2022-46169 | Cacti Cacti | 2023-02-16 | 99.8% | Unknown |
| CVE-2020-28949 | PEAR Archive_Tar | 2022-08-25 | 84.5% | Unknown |
| CVE-2019-11581 | Atlassian Jira Server and Data Center | 2022-03-07 | 84.6% | Unknown |
| CVE-2019-2725 | Oracle WebLogic Server | 2022-01-10 | 99.9% | Known |
| CVE-2020-8468 | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents | 2021-11-03 | 6.1% | Unknown |
| CVE-2020-17496 | vBulletin vBulletin | 2021-11-03 | 87.3% | Unknown |
| CVE-2019-17558 | Apache Solr | 2021-11-03 | 98.5% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
12 KEV entries are classified as CWE-74. CWE definition (MITRE)