Vulnerabilities added to KEV in March 2025
Added32
Ransomware-linked4
Vendors18
By vendor
7
3
3
2
2
2
2
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-20439 | Cisco Smart Licensing Utility | 2025-03-31 | 97.0% | Unknown |
| CVE-2025-2783 | Google Chromium Mojo | 2025-03-27 | 9.2% | Unknown |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 13.7% | Unknown |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 83.7% | Unknown |
| CVE-2025-30154 | reviewdog action-setup GitHub Action | 2025-03-24 | 2.4% | Unknown |
| CVE-2025-1316 | Edimax IC-7100 IP Camera | 2025-03-19 | 74.4% | Unknown |
| CVE-2024-48248 | NAKIVO Backup and Replication | 2025-03-19 | 94.3% | Unknown |
| CVE-2017-12637 | SAP NetWeaver | 2025-03-19 | 95.1% | Unknown |
| CVE-2025-30066 | tj-actions changed-files GitHub Action | 2025-03-18 | 72.0% | Unknown |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy | 2025-03-18 | 7.2% | Known |
| CVE-2025-24201 | Apple Multiple Products | 2025-03-13 | 3.8% | Unknown |
| CVE-2025-21590 | Juniper Junos OS | 2025-03-13 | 1.7% | Unknown |
| CVE-2025-26633 | Microsoft Windows | 2025-03-11 | 30.3% | Known |
| CVE-2025-24993 | Microsoft Windows | 2025-03-11 | 2.2% | Unknown |
| CVE-2025-24991 | Microsoft Windows | 2025-03-11 | 2.0% | Unknown |
| CVE-2025-24985 | Microsoft Windows | 2025-03-11 | 3.9% | Unknown |
| CVE-2025-24984 | Microsoft Windows | 2025-03-11 | 1.9% | Unknown |
| CVE-2025-24983 | Microsoft Windows | 2025-03-11 | 1.3% | Unknown |
| CVE-2025-25181 | Advantive VeraCore | 2025-03-10 | 55.5% | Unknown |
| CVE-2024-57968 | Advantive VeraCore | 2025-03-10 | 32.2% | Unknown |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 90.0% | Unknown |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 91.2% | Unknown |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 99.9% | Unknown |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion | 2025-03-04 | 1.7% | Unknown |
| CVE-2025-22225 | VMware ESXi | 2025-03-04 | 1.0% | Known |
| CVE-2025-22224 | VMware ESXi and Workstation | 2025-03-04 | 1.5% | Unknown |
| CVE-2024-50302 | Linux Kernel | 2025-03-04 | 0.8% | Unknown |
| CVE-2024-4885 | Progress WhatsUp Gold | 2025-03-03 | 99.2% | Unknown |
| CVE-2023-20118 | Cisco Small Business RV Series Routers | 2025-03-03 | 54.1% | Unknown |
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 92.2% | Unknown |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 97.6% | Unknown |
| CVE-2018-8639 | Microsoft Windows | 2025-03-03 | 22.1% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.