Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2018-8639 — Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
|
Microsoft | Windows | Mar 3, 2025 | Mar 24, 2025 | Ransomware |
|
CVE-2022-43769 — Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.
|
Hitachi Vantara | Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | |
|
CVE-2022-43939 — Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.
|
Hitachi Vantara | Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | |
|
CVE-2023-20118 — Cisco Small Business RV Series Routers Command Injection Vulnerability
Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.
|
Cisco | Small Business RV Series Routers | Mar 3, 2025 | Mar 24, 2025 | |
|
CVE-2024-4885 — Progress WhatsUp Gold Path Traversal Vulnerability
Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.
|
Progress | WhatsUp Gold | Mar 3, 2025 | Mar 24, 2025 | |
|
CVE-2023-34192 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.
|
Synacor | Zimbra Collaboration Suite (ZCS) | Feb 25, 2025 | Mar 18, 2025 | |
|
CVE-2024-49035 — Microsoft Partner Center Improper Access Control Vulnerability
Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.
|
Microsoft | Partner Center | Feb 25, 2025 | Mar 18, 2025 | |
|
CVE-2017-3066 — Adobe ColdFusion Deserialization Vulnerability
Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.
|
Adobe | ColdFusion | Feb 24, 2025 | Mar 17, 2025 | |
|
CVE-2024-20953 — Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.
|
Oracle | Agile Product Lifecycle Management (PLM) | Feb 24, 2025 | Mar 17, 2025 | |
|
CVE-2025-24989 — Microsoft Power Pages Improper Access Control Vulnerability
Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.
|
Microsoft | Power Pages | Feb 21, 2025 | Mar 14, 2025 |
Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Windows · Mar 3, 2025
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.
Pentaho Business Analytics (BA) Server · Mar 3, 2025
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.
Pentaho Business Analytics (BA) Server · Mar 3, 2025
Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.
Small Business RV Series Routers · Mar 3, 2025
Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.
WhatsUp Gold · Mar 3, 2025
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.
Zimbra Collaboration Suite (ZCS) · Feb 25, 2025
Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.
Partner Center · Feb 25, 2025
Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.
ColdFusion · Feb 24, 2025
Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.
Agile Product Lifecycle Management (PLM) · Feb 24, 2025
Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.
Power Pages · Feb 21, 2025