Vulnerability Intelligence

Exploited CVEs

1.7K
CISA KEV catalog

Ransomware-linked

338
20% of KEV

Actor-attributed

41
named groups

EPSS-scored

1.7K
861 likely-exploited (≥0.5)

KEV overdue

1.7K
past CISA due date

🏢 Top affected vendors

🔧 Top affected products

Windows
172
Multiple Products
79
Chromium V8
39
Internet Explorer
36
Flash Player
33
Office
29
Kernel
29
Win32k
25
Exchange Server
17
ColdFusion
16
Zimbra Collaboration Suite (ZCS)
15
IOS and IOS XE Software
14
Mobile Devices
13
Acrobat and Reader
13

📅 Exploited CVEs by year

2002
1
2004
2
2005
1
2006
2
2007
3
2008
6
2009
15
2010
23
2011
9
2012
22
2013
38
2014
34
2015
44
2016
59
2017
86
2018
89
2019
118
2020
146
2021
214
2022
131
2023
164
2024
164
2025
184
2026
107

🏹 Actor attribution counts

🤖 CWE weakness distribution

CWE-78
93
CWE-20
91
CWE-416
89
CWE-119
84
CWE-787
84
CWE-22
70
CWE-94
62
CWE-502
61
CWE-287
36
CWE-284
33
CWE-843
32
CWE-306
32
CWE-264
31
CWE-89
27

📈 EPSS probability bands

Likely (≥.5)
861
Elevated (.1–.5)
404
Moderate (.01–.1)
353
Low (<.01)
44

🔒 Ransomware-linked share

Other exploited
1.3K
Ransomware-known
338

📈 Exploit-probability coverage

1.7K of 1.7K KEV CVEs carry a FIRST EPSS score (100%). 861 score ≥0.5 (likely exploited within 30 days). Re-run EPSS enrichment to refresh.

☠ Most dangerous exploited CVEs (ransomware · actor · EPSS · recency weighted)

#CVEVendor / ProductDangerEPSSRansomwareActorsAdded
1CVE-2025-0282Ivanti Connect Secure, Policy Secur
110.3
100.0%KNOWNUNC / China-nexus2025-01-08
2CVE-2024-40711Veeam Backup & Replication
107.0
90.4%KNOWNAkira, Fog2024-10-17
3CVE-2024-4577PHP Group PHP
106.8
100.0%KNOWNmultiple2024-06-12
4CVE-2024-3400Palo Alto Networks PAN-OS
105.8
100.0%KNOWNmultiple2024-04-12
5CVE-2024-1709ConnectWise ScreenConnect
105.0
100.0%KNOWNmultiple ransomware2024-02-22
6CVE-2024-21412Microsoft Windows
103.9
95.4%KNOWNWater Hydra2024-02-13
7CVE-2023-46604Apache ActiveMQ
103.1
99.7%KNOWNmultiple2023-11-02
8CVE-2023-4966Citrix NetScaler ADC and NetScaler
102.9
100.0%KNOWNLockBit2023-10-18
9CVE-2023-22515Atlassian Confluence Data Center and S
102.5
99.2%KNOWNnation-state + criminal2023-10-05
10CVE-2024-21762Fortinet FortiOS
101.6
84.3%KNOWNmultiple2024-02-09
11CVE-2023-3519Citrix NetScaler ADC and NetScaler
101.3
99.7%KNOWNmultiple2023-07-19
12CVE-2023-34362Progress MOVEit Transfer
100.6
99.9%KNOWNClop (TA505/FIN11)2023-06-02
13CVE-2021-45046Apache Log4j2
100.0
100.0%KNOWNmultiple2023-05-01
14CVE-2023-27350PaperCut MF/NG
99.9
100.0%KNOWNClop, LockBit2023-04-21
15CVE-2023-0669Fortra GoAnywhere MFT
98.7
100.0%KNOWNClop (TA505)2023-02-10
16CVE-2022-41040Microsoft Exchange Server
96.5
100.0%KNOWNmultiple ransomware2022-09-30
17CVE-2022-41082Microsoft Exchange Server
96.5
100.0%KNOWNmultiple ransomware2022-09-30
18CVE-2022-26134Atlassian Confluence Server/Data Cente
95.0
100.0%KNOWNmultiple2022-06-02
19CVE-2022-1388F5 BIG-IP
95.0
100.0%KNOWNmultiple2022-05-10
20CVE-2020-0796Microsoft SMBv3
95.0
99.8%KNOWNmultiple2022-02-10
21CVE-2021-44228Apache Log4j2
95.0
100.0%KNOWNmultiple (APT + criminal)2021-12-10
22CVE-2017-5638Apache Struts
95.0
100.0%KNOWNmultiple2021-11-03
23CVE-2019-0708Microsoft Remote Desktop Services
95.0
100.0%KNOWNmultiple2021-11-03
24CVE-2017-11882Microsoft Office
95.0
99.9%KNOWNmultiple (commodity + APT)2021-11-03
25CVE-2018-13379Fortinet FortiOS
95.0
100.0%KNOWNmultiple ransomware2021-11-03

🛡 Vulnerability → Malware / Ransomware / Actor

Type a full CVE id (e.g. CVE-2023-34362) for the full dossier — EPSS, KEV due-date, attributed malware/actors, entity graph & OSINT pivots.

45 vulnerabilities (use the ⇩ CSV button to export the filtered view)

CVEVendor / ProductEPSSRansomwareMalware / RansomwareActorsAddedDue date
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleT95.5%KNOWNransomware (KEV-flagged)—2026-06-122026-06-15 ⚠
CVE-2025-61884Oracle E-Business Suite97.8%KNOWNransomware (KEV-flagged)—2025-10-202025-11-10 ⚠
CVE-2025-61882Oracle E-Business Suite99.7%KNOWNransomware (KEV-flagged)—2025-10-062025-10-27 ⚠
CVE-2022-21587Oracle E-Business Suite98.3%KNOWNransomware (KEV-flagged)—2023-02-022023-02-23 ⚠
CVE-2012-1710Oracle Fusion Middleware11.6%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-0422Oracle Java Runtime Environment (JRE)97.6%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-0431Oracle Java Runtime Environment (JRE)90.0%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-2465Oracle Java SE98.7%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2012-0507Oracle Java SE98.1%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2012-1723Oracle Java SE93.7%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2012-4681Oracle Java SE98.5%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2017-10271Oracle WebLogic Server100.0%KNOWNransomware (KEV-flagged)—2022-02-102022-08-10 ⚠
CVE-2019-2725Oracle WebLogic Server100.0%KNOWNransomware (KEV-flagged)—2022-01-102022-07-10 ⚠
CVE-2026-46817Oracle E-Business Suite13.3%———2026-07-152026-07-18 ⚠
CVE-2024-21182Oracle WebLogic Server50.0%———2026-06-012026-06-04 ⚠
CVE-2025-61757Oracle Fusion Middleware88.3%———2025-11-212025-12-12 ⚠
CVE-2024-20953Oracle Agile Product Lifecycle Manage3.4%———2025-02-242025-03-17 ⚠
CVE-2020-2883Oracle WebLogic Server94.9%———2025-01-072025-01-28 ⚠
CVE-2024-21287Oracle Agile Product Lifecycle Manage1.5%———2024-11-212024-12-12 ⚠
CVE-2020-14644Oracle WebLogic Server94.5%———2024-09-182024-10-09 ⚠
CVE-2022-21445Oracle ADF Faces62.5%———2024-09-182024-10-09 ⚠
CVE-2017-3506Oracle WebLogic Server96.3%———2024-06-032024-06-24 ⚠
CVE-2020-2551Oracle Fusion Middleware93.2%———2023-11-162023-12-07 ⚠
CVE-2016-3427Oracle Java SE and JRockit92.3%———2023-05-122023-06-02 ⚠
CVE-2023-21839Oracle WebLogic Server99.8%———2023-05-012023-05-22 ⚠
CVE-2021-35587Oracle Fusion Middleware96.3%———2022-11-282022-12-19 ⚠
CVE-2018-2628Oracle WebLogic Server99.4%———2022-09-082022-09-29 ⚠
CVE-2010-0840Oracle Java Runtime Environment (JRE)96.3%———2022-05-252022-06-15 ⚠
CVE-2013-2423Oracle Java Runtime Environment (JRE)85.3%———2022-05-252022-06-15 ⚠
CVE-2019-3010Oracle Solaris13.4%———2022-05-252022-06-15 ⚠
CVE-2012-0518Oracle Fusion Middleware4.7%———2022-03-282022-04-18 ⚠
CVE-2012-5076Oracle Java SE91.0%———2022-03-282022-04-18 ⚠
CVE-2019-2616Oracle BI Publisher (Formerly XML Pub92.2%———2022-03-252022-04-15 ⚠
CVE-2008-3431Oracle VirtualBox6.9%———2022-03-032022-03-24 ⚠
CVE-2011-3544Oracle Java SE JDK and JRE96.7%———2022-03-032022-03-24 ⚠
CVE-2015-2590Oracle Java SE25.5%———2022-03-032022-03-24 ⚠
CVE-2015-4902Oracle Java SE13.4%———2022-03-032022-03-24 ⚠
CVE-2020-14864Oracle Intelligence Enterprise Editio97.2%———2022-01-182022-07-18 ⚠
CVE-2012-3152Oracle Fusion Middleware98.7%———2021-11-032022-05-03 ⚠
CVE-2015-4852Oracle WebLogic Server96.0%———2021-11-032022-05-03 ⚠
CVE-2020-2555Oracle Multiple Products97.1%———2021-11-032022-05-03 ⚠
CVE-2020-14750Oracle WebLogic Server99.3%———2021-11-032022-05-03 ⚠
CVE-2020-14871Oracle Solaris and Zettabyte File Sys79.8%———2021-11-032022-05-03 ⚠
CVE-2020-14882Oracle WebLogic Server100.0%———2021-11-032022-05-03 ⚠
CVE-2020-14883Oracle WebLogic Server97.9%———2021-11-032022-05-03 ⚠

🔗 Pivot

Exploit theater →Ransomware theater →Malware families →Actor profiles →Detection rules →Refresh KEV →Score EPSS →
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center