Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2021-22893 — Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.
|
Ivanti | Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2021-22894 — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.
|
Ivanti | Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2021-22899 — Ivanti Pulse Connect Secure Command Injection Vulnerability
Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.
|
Ivanti | Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2021-22900 — Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
|
Ivanti | Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2021-22986 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
|
F5 | BIG-IP and BIG-IQ Centralized Management | Nov 3, 2021 | Nov 17, 2021 | Ransomware |
|
CVE-2021-23874 — McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
|
McAfee | McAfee Total Protection (MTP) | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-26084 — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.
|
Atlassian | Confluence Server and Data Center | Nov 3, 2021 | Nov 17, 2021 | Ransomware |
|
CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.
|
Microsoft | Internet Explorer | Nov 3, 2021 | Nov 17, 2021 | Ransomware |
|
CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
|
Microsoft | Exchange Server | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
|
Microsoft | Exchange Server | Nov 3, 2021 | May 3, 2022 | Ransomware |
Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.
Pulse Connect Secure · Nov 3, 2021
Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.
Pulse Connect Secure · Nov 3, 2021
Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.
Pulse Connect Secure · Nov 3, 2021
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
Pulse Connect Secure · Nov 3, 2021
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
BIG-IP and BIG-IQ Centralized Management · Nov 3, 2021
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
McAfee Total Protection (MTP) · Nov 3, 2021
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.
Confluence Server and Data Center · Nov 3, 2021
Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.
Internet Explorer · Nov 3, 2021
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Exchange Server · Nov 3, 2021
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Exchange Server · Nov 3, 2021