--- title: "CISA KEV catalog, page 7 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=7 --- # CISA KEV catalog, page 7 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ---------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2020-0618](https://cubepath.com/security/cve/CVE-2020-0618) | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft / SQL Server | Sep 18, 2024 | Oct 9, 2024 | Known | | [CVE-2020-14644](https://cubepath.com/security/cve/CVE-2020-14644) | Oracle WebLogic Server Remote Code Execution Vulnerability Oracle / WebLogic Server | Sep 18, 2024 | Oct 9, 2024 | | | [CVE-2022-21445](https://cubepath.com/security/cve/CVE-2022-21445) | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle / ADF Faces | Sep 18, 2024 | Oct 9, 2024 | | | [CVE-2024-27348](https://cubepath.com/security/cve/CVE-2024-27348) | Apache HugeGraph-Server Improper Access Control Vulnerability Apache / HugeGraph-Server | Sep 18, 2024 | Oct 9, 2024 | | | [CVE-2013-0643](https://cubepath.com/security/cve/CVE-2013-0643) | Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | | | [CVE-2013-0648](https://cubepath.com/security/cve/CVE-2013-0648) | Adobe Flash Player Code Execution Vulnerability Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | | | [CVE-2014-0497](https://cubepath.com/security/cve/CVE-2014-0497) | Adobe Flash Player Integer Underflow Vulnerablity Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | | | [CVE-2014-0502](https://cubepath.com/security/cve/CVE-2014-0502) | Adobe Flash Player Double Free Vulnerablity Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | | | [CVE-2024-43461](https://cubepath.com/security/cve/CVE-2024-43461) | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft / Windows | Sep 16, 2024 | Oct 7, 2024 | | | [CVE-2024-6670](https://cubepath.com/security/cve/CVE-2024-6670) | Progress WhatsUp Gold SQL Injection Vulnerability Progress / WhatsUp Gold | Sep 16, 2024 | Oct 7, 2024 | Known | | [CVE-2024-8190](https://cubepath.com/security/cve/CVE-2024-8190) | Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti / Cloud Services Appliance | Sep 13, 2024 | Oct 4, 2024 | | | [CVE-2024-38014](https://cubepath.com/security/cve/CVE-2024-38014) | Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft / Windows | Sep 10, 2024 | Oct 1, 2024 | | | [CVE-2024-38217](https://cubepath.com/security/cve/CVE-2024-38217) | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft / Windows | Sep 10, 2024 | Oct 1, 2024 | | | [CVE-2024-38226](https://cubepath.com/security/cve/CVE-2024-38226) | Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft / Publisher | Sep 10, 2024 | Oct 1, 2024 | | | [CVE-2016-3714](https://cubepath.com/security/cve/CVE-2016-3714) | ImageMagick Improper Input Validation Vulnerability ImageMagick / ImageMagick | Sep 9, 2024 | Sep 30, 2024 | | | [CVE-2017-1000253](https://cubepath.com/security/cve/CVE-2017-1000253) | Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux / Kernel | Sep 9, 2024 | Sep 30, 2024 | Known | | [CVE-2024-40766](https://cubepath.com/security/cve/CVE-2024-40766) | SonicWall SonicOS Improper Access Control Vulnerability SonicWall / SonicOS | Sep 9, 2024 | Sep 30, 2024 | Known | | [CVE-2021-20123](https://cubepath.com/security/cve/CVE-2021-20123) | Draytek VigorConnect Path Traversal Vulnerability DrayTek / VigorConnect | Sep 3, 2024 | Sep 24, 2024 | | | [CVE-2021-20124](https://cubepath.com/security/cve/CVE-2021-20124) | Draytek VigorConnect Path Traversal Vulnerability DrayTek / VigorConnect | Sep 3, 2024 | Sep 24, 2024 | | | [CVE-2024-7262](https://cubepath.com/security/cve/CVE-2024-7262) | Kingsoft WPS Office Path Traversal Vulnerability Kingsoft / WPS Office | Sep 3, 2024 | Sep 24, 2024 | | | [CVE-2024-7965](https://cubepath.com/security/cve/CVE-2024-7965) | Google Chromium V8 Inappropriate Implementation Vulnerability Google / Chromium V8 | Aug 28, 2024 | Sep 18, 2024 | | | [CVE-2024-38856](https://cubepath.com/security/cve/CVE-2024-38856) | Apache OFBiz Incorrect Authorization Vulnerability Apache / OFBiz | Aug 27, 2024 | Sep 17, 2024 | | | [CVE-2024-7971](https://cubepath.com/security/cve/CVE-2024-7971) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Aug 26, 2024 | Sep 16, 2024 | | | [CVE-2024-39717](https://cubepath.com/security/cve/CVE-2024-39717) | Versa Director Dangerous File Type Upload Vulnerability Versa / Director | Aug 23, 2024 | Sep 13, 2024 | | | [CVE-2021-31196](https://cubepath.com/security/cve/CVE-2021-31196) | Microsoft Exchange Server Information Disclosure Vulnerability Microsoft / Exchange Server | Aug 21, 2024 | Sep 11, 2024 | | | [CVE-2021-33044](https://cubepath.com/security/cve/CVE-2021-33044) | Dahua IP Camera Authentication Bypass Vulnerability Dahua / IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | | | [CVE-2021-33045](https://cubepath.com/security/cve/CVE-2021-33045) | Dahua IP Camera Authentication Bypass Vulnerability Dahua / IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | | | [CVE-2022-0185](https://cubepath.com/security/cve/CVE-2022-0185) | Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux / Kernel | Aug 21, 2024 | Sep 11, 2024 | | | [CVE-2024-23897](https://cubepath.com/security/cve/CVE-2024-23897) | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins / Jenkins Command Line Interface (CLI) | Aug 19, 2024 | Sep 9, 2024 | Known | | [CVE-2024-28986](https://cubepath.com/security/cve/CVE-2024-28986) | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds / Web Help Desk | Aug 15, 2024 | Sep 5, 2024 | | | [CVE-2024-38106](https://cubepath.com/security/cve/CVE-2024-38106) | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | | | [CVE-2024-38107](https://cubepath.com/security/cve/CVE-2024-38107) | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | | | [CVE-2024-38178](https://cubepath.com/security/cve/CVE-2024-38178) | Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | | | [CVE-2024-38189](https://cubepath.com/security/cve/CVE-2024-38189) | Microsoft Project Remote Code Execution Vulnerability Microsoft / Project | Aug 13, 2024 | Sep 3, 2024 | | | [CVE-2024-38193](https://cubepath.com/security/cve/CVE-2024-38193) | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | | | [CVE-2024-38213](https://cubepath.com/security/cve/CVE-2024-38213) | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | | | [CVE-2024-32113](https://cubepath.com/security/cve/CVE-2024-32113) | Apache OFBiz Path Traversal Vulnerability Apache / OFBiz | Aug 7, 2024 | Aug 28, 2024 | | | [CVE-2024-36971](https://cubepath.com/security/cve/CVE-2024-36971) | Android Kernel Remote Code Execution Vulnerability Android / Kernel | Aug 7, 2024 | Aug 28, 2024 | | | [CVE-2018-0824](https://cubepath.com/security/cve/CVE-2018-0824) | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft / Windows | Aug 5, 2024 | Aug 26, 2024 | | | [CVE-2024-37085](https://cubepath.com/security/cve/CVE-2024-37085) | VMware ESXi Authentication Bypass Vulnerability VMware / ESXi | Jul 30, 2024 | Aug 20, 2024 | Known | | [CVE-2023-45249](https://cubepath.com/security/cve/CVE-2023-45249) | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis / Cyber Infrastructure (ACI) | Jul 29, 2024 | Aug 19, 2024 | | | [CVE-2024-4879](https://cubepath.com/security/cve/CVE-2024-4879) | ServiceNow Improper Input Validation Vulnerability ServiceNow / Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | | | [CVE-2024-5217](https://cubepath.com/security/cve/CVE-2024-5217) | ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow / Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | | | [CVE-2012-4792](https://cubepath.com/security/cve/CVE-2012-4792) | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Jul 23, 2024 | Aug 13, 2024 | | | [CVE-2024-39891](https://cubepath.com/security/cve/CVE-2024-39891) | Twilio Authy Information Disclosure Vulnerability Twilio / Authy | Jul 23, 2024 | Aug 13, 2024 | | | [CVE-2022-22948](https://cubepath.com/security/cve/CVE-2022-22948) | VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware / vCenter Server | Jul 17, 2024 | Aug 7, 2024 | | | [CVE-2024-28995](https://cubepath.com/security/cve/CVE-2024-28995) | SolarWinds Serv-U Path Traversal Vulnerability SolarWinds / Serv-U | Jul 17, 2024 | Aug 7, 2024 | | | [CVE-2024-34102](https://cubepath.com/security/cve/CVE-2024-34102) | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe / Commerce and Magento Open Source | Jul 17, 2024 | Aug 7, 2024 | | | [CVE-2024-36401](https://cubepath.com/security/cve/CVE-2024-36401) | OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo / GeoServer | Jul 15, 2024 | Aug 5, 2024 | | | [CVE-2024-23692](https://cubepath.com/security/cve/CVE-2024-23692) | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto / HTTP File Server | Jul 9, 2024 | Jul 30, 2024 | Known | | [CVE-2024-38080](https://cubepath.com/security/cve/CVE-2024-38080) | Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft / Windows | Jul 9, 2024 | Jul 30, 2024 | | | [CVE-2024-38112](https://cubepath.com/security/cve/CVE-2024-38112) | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft / Windows | Jul 9, 2024 | Jul 30, 2024 | | | [CVE-2024-20399](https://cubepath.com/security/cve/CVE-2024-20399) | Cisco NX-OS Command Injection Vulnerability Cisco / NX-OS | Jul 2, 2024 | Jul 23, 2024 | | | [CVE-2020-13965](https://cubepath.com/security/cve/CVE-2020-13965) | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube / Webmail | Jun 26, 2024 | Jul 17, 2024 | | | [CVE-2022-24816](https://cubepath.com/security/cve/CVE-2022-24816) | OSGeo GeoServer JAI-EXT Code Injection Vulnerability OSGeo / JAI-EXT | Jun 26, 2024 | Jul 17, 2024 | | | [CVE-2022-2586](https://cubepath.com/security/cve/CVE-2022-2586) | Linux Kernel Use-After-Free Vulnerability Linux / Kernel | Jun 26, 2024 | Jul 17, 2024 | | | [CVE-2024-26169](https://cubepath.com/security/cve/CVE-2024-26169) | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft / Windows | Jun 13, 2024 | Jul 4, 2024 | Known | | [CVE-2024-32896](https://cubepath.com/security/cve/CVE-2024-32896) | Android Pixel Privilege Escalation Vulnerability Android / Pixel | Jun 13, 2024 | Jul 4, 2024 | | | [CVE-2024-4358](https://cubepath.com/security/cve/CVE-2024-4358) | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress / Telerik Report Server | Jun 13, 2024 | Jul 4, 2024 | | | [CVE-2024-4577](https://cubepath.com/security/cve/CVE-2024-4577) | PHP-CGI OS Command Injection Vulnerability PHP Group / PHP | Jun 12, 2024 | Jul 3, 2024 | Known | | [CVE-2024-4610](https://cubepath.com/security/cve/CVE-2024-4610) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm / Mali GPU Kernel Driver | Jun 12, 2024 | Jul 3, 2024 | | | [CVE-2017-3506](https://cubepath.com/security/cve/CVE-2017-3506) | Oracle WebLogic Server OS Command Injection Vulnerability Oracle / WebLogic Server | Jun 3, 2024 | Jun 24, 2024 | | | [CVE-2024-1086](https://cubepath.com/security/cve/CVE-2024-1086) | Linux Kernel Use-After-Free Vulnerability Linux / Kernel | May 30, 2024 | Jun 20, 2024 | Known | | [CVE-2024-24919](https://cubepath.com/security/cve/CVE-2024-24919) | Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point / Quantum Security Gateways | May 30, 2024 | Jun 20, 2024 | Known | | [CVE-2024-4978](https://cubepath.com/security/cve/CVE-2024-4978) | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions / Viewer | May 29, 2024 | Jun 19, 2024 | | | [CVE-2024-5274](https://cubepath.com/security/cve/CVE-2024-5274) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | May 28, 2024 | Jun 18, 2024 | | | [CVE-2020-17519](https://cubepath.com/security/cve/CVE-2020-17519) | Apache Flink Improper Access Control Vulnerability Apache / Flink | May 23, 2024 | Jun 13, 2024 | | | [CVE-2023-43208](https://cubepath.com/security/cve/CVE-2023-43208) | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability NextGen Healthcare / Mirth Connect | May 20, 2024 | Jun 10, 2024 | Known | | [CVE-2024-4947](https://cubepath.com/security/cve/CVE-2024-4947) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | May 20, 2024 | Jun 10, 2024 | | | [CVE-2014-100005](https://cubepath.com/security/cve/CVE-2014-100005) | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability D-Link / DIR-600 Router | May 16, 2024 | Jun 6, 2024 | | | [CVE-2021-40655](https://cubepath.com/security/cve/CVE-2021-40655) | D-Link DIR-605 Router Information Disclosure Vulnerability D-Link / DIR-605 Router | May 16, 2024 | Jun 6, 2024 | | | [CVE-2024-4761](https://cubepath.com/security/cve/CVE-2024-4761) | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google / Chromium V8 | May 16, 2024 | Jun 6, 2024 | | | [CVE-2024-30040](https://cubepath.com/security/cve/CVE-2024-30040) | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft / Windows | May 14, 2024 | Jun 4, 2024 | | | [CVE-2024-30051](https://cubepath.com/security/cve/CVE-2024-30051) | Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft / DWM Core Library | May 14, 2024 | Jun 4, 2024 | Known | | [CVE-2024-4671](https://cubepath.com/security/cve/CVE-2024-4671) | Google Chromium Visuals Use-After-Free Vulnerability Google / Chromium | May 13, 2024 | Jun 3, 2024 | | | [CVE-2023-7028](https://cubepath.com/security/cve/CVE-2023-7028) | GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab / GitLab CE/EE | May 1, 2024 | May 22, 2024 | | | [CVE-2024-29988](https://cubepath.com/security/cve/CVE-2024-29988) | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft / SmartScreen Prompt | Apr 30, 2024 | May 21, 2024 | | | [CVE-2024-20353](https://cubepath.com/security/cve/CVE-2024-20353) | Cisco ASA and FTD Denial of Service Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Apr 24, 2024 | May 1, 2024 | | | [CVE-2024-20359](https://cubepath.com/security/cve/CVE-2024-20359) | Cisco ASA and FTD Privilege Escalation Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Apr 24, 2024 | May 1, 2024 | | | [CVE-2024-4040](https://cubepath.com/security/cve/CVE-2024-4040) | CrushFTP VFS Sandbox Escape Vulnerability CrushFTP / CrushFTP | Apr 24, 2024 | May 1, 2024 | | | [CVE-2022-38028](https://cubepath.com/security/cve/CVE-2022-38028) | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft / Windows | Apr 23, 2024 | May 14, 2024 | | | [CVE-2024-3400](https://cubepath.com/security/cve/CVE-2024-3400) | Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks / PAN-OS | Apr 12, 2024 | Apr 19, 2024 | Known | | [CVE-2024-3272](https://cubepath.com/security/cve/CVE-2024-3272) | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link / Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | | | [CVE-2024-3273](https://cubepath.com/security/cve/CVE-2024-3273) | D-Link Multiple NAS Devices Command Injection Vulnerability D-Link / Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | | | [CVE-2024-29745](https://cubepath.com/security/cve/CVE-2024-29745) | Android Pixel Information Disclosure Vulnerability Android / Pixel | Apr 4, 2024 | Apr 25, 2024 | | | [CVE-2024-29748](https://cubepath.com/security/cve/CVE-2024-29748) | Android Pixel Privilege Escalation Vulnerability Android / Pixel | Apr 4, 2024 | Apr 25, 2024 | | | [CVE-2023-24955](https://cubepath.com/security/cve/CVE-2023-24955) | Microsoft SharePoint Server Code Injection Vulnerability Microsoft / SharePoint Server | Mar 26, 2024 | Apr 16, 2024 | Known | | [CVE-2019-7256](https://cubepath.com/security/cve/CVE-2019-7256) | Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice / Linear eMerge E3-Series | Mar 25, 2024 | Apr 15, 2024 | | | [CVE-2021-44529](https://cubepath.com/security/cve/CVE-2021-44529) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA) | Mar 25, 2024 | Apr 15, 2024 | Known | | [CVE-2023-48788](https://cubepath.com/security/cve/CVE-2023-48788) | Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet / FortiClient EMS | Mar 25, 2024 | Apr 15, 2024 | Known | | [CVE-2024-27198](https://cubepath.com/security/cve/CVE-2024-27198) | JetBrains TeamCity Authentication Bypass Vulnerability JetBrains / TeamCity | Mar 7, 2024 | Mar 28, 2024 | Known | | [CVE-2024-23225](https://cubepath.com/security/cve/CVE-2024-23225) | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | Mar 6, 2024 | Mar 27, 2024 | | | [CVE-2024-23296](https://cubepath.com/security/cve/CVE-2024-23296) | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | Mar 6, 2024 | Mar 27, 2024 | | | [CVE-2021-36380](https://cubepath.com/security/cve/CVE-2021-36380) | Sunhillo SureLine OS Command Injection Vulnerablity Sunhillo / SureLine | Mar 5, 2024 | Mar 26, 2024 | | | [CVE-2023-21237](https://cubepath.com/security/cve/CVE-2023-21237) | Android Pixel Information Disclosure Vulnerability Android / Pixel | Mar 5, 2024 | Mar 26, 2024 | | | [CVE-2024-21338](https://cubepath.com/security/cve/CVE-2024-21338) | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft / Windows | Mar 4, 2024 | Mar 25, 2024 | Known | | [CVE-2023-29360](https://cubepath.com/security/cve/CVE-2023-29360) | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft / Streaming Service | Feb 29, 2024 | Mar 21, 2024 | | | [CVE-2024-1709](https://cubepath.com/security/cve/CVE-2024-1709) | ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise / ScreenConnect | Feb 22, 2024 | Feb 29, 2024 | Known | | [CVE-2020-3259](https://cubepath.com/security/cve/CVE-2020-3259) | Cisco ASA and FTD Information Disclosure Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Feb 15, 2024 | Mar 7, 2024 | Known | | [CVE-2024-21410](https://cubepath.com/security/cve/CVE-2024-21410) | Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft / Exchange Server | Feb 15, 2024 | Mar 7, 2024 | | [Newer](https://cubepath.com/security/cve/kev?page=6) Page 7 of 18 [Older](https://cubepath.com/security/cve/kev?page=8) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)