Exploited Vulnerabilities DailyCVEs from 2017 known to be exploited
Entries86
Ransomware-linked20
Avg. lag5.1 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2017-7921 | Hikvision Multiple Products | 2026-03-05 | 99.9% | Unknown |
| CVE-2017-1000353 | Jenkins Jenkins | 2025-10-02 | 99.6% | Unknown |
| CVE-2017-12637 | SAP NetWeaver | 2025-03-19 | 95.1% | Unknown |
| CVE-2017-3066 | Adobe ColdFusion | 2025-02-24 | 90.5% | Unknown |
| CVE-2017-1000253 | Linux Kernel | 2024-09-09 | 10.6% | Known |
| CVE-2017-3506 | Oracle WebLogic Server | 2024-06-03 | 96.2% | Unknown |
| CVE-2017-6884 | Zyxel EMG2926 Routers | 2023-09-18 | 34.6% | Known |
| CVE-2017-18368 | Zyxel P660HN-T1A Routers | 2023-08-07 | 94.4% | Unknown |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 2023-04-19 | 21.4% | Unknown |
| CVE-2017-7494 | Samba Samba | 2023-03-30 | 99.4% | Known |
| CVE-2017-11357 | Telerik User Interface (UI) for ASP.NET AJAX | 2023-01-26 | 77.6% | Known |
| CVE-2017-5521 | NETGEAR Multiple Devices | 2022-09-08 | 89.2% | Unknown |
| CVE-2017-15944 | Palo Alto Networks PAN-OS | 2022-08-18 | 98.3% | Unknown |
| CVE-2017-6862 | NETGEAR Multiple Devices | 2022-06-08 | 45.7% | Unknown |
| CVE-2017-5070 | Google Chromium V8 | 2022-06-08 | 32.0% | Unknown |
| CVE-2017-5030 | Google Chromium V8 | 2022-06-08 | 40.6% | Unknown |
| CVE-2017-8543 | Microsoft Windows | 2022-05-24 | 74.1% | Unknown |
| CVE-2017-8291 | Artifex Ghostscript | 2022-05-24 | 96.9% | Unknown |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | 2022-05-24 | 86.8% | Known |
| CVE-2017-0210 | Microsoft Internet Explorer | 2022-05-24 | 22.3% | Unknown |
| CVE-2017-0149 | Microsoft Internet Explorer | 2022-05-24 | 29.1% | Unknown |
| CVE-2017-0147 | Microsoft SMBv1 server | 2022-05-24 | 99.6% | Known |
| CVE-2017-0022 | Microsoft XML Core Services | 2022-05-24 | 18.0% | Unknown |
| CVE-2017-0005 | Microsoft Windows | 2022-05-24 | 11.0% | Unknown |
| CVE-2017-11317 | Telerik User Interface (UI) for ASP.NET AJAX | 2022-04-11 | 84.1% | Unknown |
| CVE-2017-0148 | Microsoft SMBv1 server | 2022-04-06 | 99.3% | Known |
| CVE-2017-0213 | Microsoft Windows | 2022-03-28 | 84.1% | Known |
| CVE-2017-0059 | Microsoft Internet Explorer | 2022-03-28 | 61.9% | Unknown |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer | 2022-03-28 | 80.3% | Unknown |
| CVE-2017-6334 | NETGEAR DGN2200 Devices | 2022-03-25 | 72.6% | Unknown |
| CVE-2017-6316 | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 2022-03-25 | 73.0% | Unknown |
| CVE-2017-3881 | Cisco IOS and IOS XE | 2022-03-25 | 98.9% | Unknown |
| CVE-2017-12617 | Apache Tomcat | 2022-03-25 | 99.9% | Unknown |
| CVE-2017-12615 | Apache Tomcat | 2022-03-25 | 99.6% | Known |
| CVE-2017-0146 | Microsoft Windows | 2022-03-25 | 89.8% | Known |
| CVE-2017-0101 | Microsoft Windows | 2022-03-15 | 57.4% | Known |
| CVE-2017-6077 | NETGEAR Wireless Router DGN2200 | 2022-03-07 | 68.7% | Unknown |
| CVE-2017-8540 | Microsoft Malware Protection Engine | 2022-03-03 | 71.8% | Unknown |
| CVE-2017-6744 | Cisco IOS software | 2022-03-03 | 7.2% | Unknown |
| CVE-2017-6743 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.8% | Unknown |
| CVE-2017-6740 | Cisco IOS and IOS XE Software | 2022-03-03 | 11.1% | Unknown |
| CVE-2017-6739 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.8% | Unknown |
| CVE-2017-6738 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.8% | Unknown |
| CVE-2017-6737 | Cisco IOS and IOS XE Software | 2022-03-03 | 45.2% | Unknown |
| CVE-2017-6736 | Cisco IOS and IOS XE Software | 2022-03-03 | 70.3% | Unknown |
| CVE-2017-6663 | Cisco IOS and IOS XE Software | 2022-03-03 | 2.1% | Unknown |
| CVE-2017-6627 | Cisco IOS and IOS XE Software | 2022-03-03 | 6.1% | Unknown |
| CVE-2017-12319 | Cisco IOS XE Software | 2022-03-03 | 5.2% | Unknown |
| CVE-2017-12240 | Cisco IOS and IOS XE Software | 2022-03-03 | 13.7% | Unknown |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches | 2022-03-03 | 2.0% | Unknown |
| CVE-2017-12237 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-12235 | Cisco IOS software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-12234 | Cisco IOS software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-12233 | Cisco IOS software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-12232 | Cisco IOS software | 2022-03-03 | 2.1% | Unknown |
| CVE-2017-12231 | Cisco IOS software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 81.1% | Unknown |
| CVE-2017-11292 | Adobe Flash Player | 2022-03-03 | 11.8% | Unknown |
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 78.1% | Unknown |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) | 2022-03-03 | 3.1% | Unknown |
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 89.8% | Unknown |
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 29.6% | Unknown |
| CVE-2017-9841 | PHPUnit PHPUnit | 2022-02-15 | 99.9% | Unknown |
| CVE-2017-9791 | Apache Struts 1 | 2022-02-10 | 98.9% | Unknown |
| CVE-2017-8464 | Microsoft Windows | 2022-02-10 | 90.0% | Unknown |
| CVE-2017-10271 | Oracle WebLogic Server | 2022-02-10 | 99.9% | Known |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | Unknown |
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 81.0% | Unknown |
| CVE-2017-0145 | Microsoft SMBv1 | 2022-02-10 | 89.8% | Known |
| CVE-2017-0144 | Microsoft SMBv1 | 2022-02-10 | 99.2% | Known |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | 2022-01-28 | 92.1% | Unknown |
| CVE-2017-1000486 | Primetek Primefaces Application | 2022-01-10 | 94.1% | Unknown |
| CVE-2017-17562 | Embedthis GoAhead | 2021-12-10 | 96.2% | Unknown |
| CVE-2017-12149 | Red Hat JBoss Application Server | 2021-12-10 | 90.7% | Known |
| CVE-2017-9822 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 94.7% | Known |
| CVE-2017-9805 | Apache Struts | 2021-11-03 | 99.3% | Unknown |
| CVE-2017-9248 | Progress ASP.NET AJAX and Sitefinity | 2021-11-03 | 75.0% | Unknown |
| CVE-2017-8759 | Microsoft .NET Framework | 2021-11-03 | 88.6% | Unknown |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | 2021-11-03 | 99.8% | Unknown |
| CVE-2017-6327 | Symantec Symantec Messaging Gateway | 2021-11-03 | 35.9% | Unknown |
| CVE-2017-5638 | Apache Struts | 2021-11-03 | 99.9% | Known |
| CVE-2017-16651 | Roundcube Roundcube Webmail | 2021-11-03 | 45.7% | Unknown |
| CVE-2017-11882 | Microsoft Office | 2021-11-03 | 99.9% | Known |
| CVE-2017-11774 | Microsoft Office | 2021-11-03 | 59.6% | Unknown |
| CVE-2017-0199 | Microsoft Office and WordPad | 2021-11-03 | 99.4% | Known |
| CVE-2017-0143 | Microsoft Windows | 2021-11-03 | 93.3% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
86 CVE-2017 vulnerabilities are in KEV; on average they were listed 5.1 years after the CVE year.