Vulnerability Intelligence

Exploited CVEs

1.7K
CISA KEV catalog

Ransomware-linked

338
20% of KEV

Actor-attributed

41
named groups

EPSS-scored

1.7K
861 likely-exploited (≥0.5)

KEV overdue

1.7K
past CISA due date

🏢 Top affected vendors

🔧 Top affected products

Windows
172
Multiple Products
79
Chromium V8
39
Internet Explorer
36
Flash Player
33
Office
29
Kernel
29
Win32k
25
Exchange Server
17
ColdFusion
16
Zimbra Collaboration Suite (ZCS)
15
IOS and IOS XE Software
14
Acrobat and Reader
13
Mobile Devices
13

📅 Exploited CVEs by year

2002
1
2004
2
2005
1
2006
2
2007
3
2008
6
2009
15
2010
23
2011
9
2012
22
2013
38
2014
34
2015
44
2016
59
2017
86
2018
89
2019
118
2020
146
2021
214
2022
131
2023
164
2024
164
2025
184
2026
107

🏹 Actor attribution counts

🤖 CWE weakness distribution

CWE-78
93
CWE-20
91
CWE-416
89
CWE-119
84
CWE-787
84
CWE-22
70
CWE-94
62
CWE-502
61
CWE-287
36
CWE-284
33
CWE-843
32
CWE-306
32
CWE-264
31
CWE-79
27

📈 EPSS probability bands

Likely (≥.5)
861
Elevated (.1–.5)
404
Moderate (.01–.1)
353
Low (<.01)
44

🔒 Ransomware-linked share

Other exploited
1.3K
Ransomware-known
338

📈 Exploit-probability coverage

1.7K of 1.7K KEV CVEs carry a FIRST EPSS score (100%). 861 score ≥0.5 (likely exploited within 30 days). Re-run EPSS enrichment to refresh.

☠ Most dangerous exploited CVEs (ransomware · actor · EPSS · recency weighted)

#CVEVendor / ProductDangerEPSSRansomwareActorsAdded
1CVE-2025-0282Ivanti Connect Secure, Policy Secur
110.3
100.0%KNOWNUNC / China-nexus2025-01-08
2CVE-2024-40711Veeam Backup & Replication
107.0
90.4%KNOWNAkira, Fog2024-10-17
3CVE-2024-4577PHP Group PHP
106.8
100.0%KNOWNmultiple2024-06-12
4CVE-2024-3400Palo Alto Networks PAN-OS
105.8
100.0%KNOWNmultiple2024-04-12
5CVE-2024-1709ConnectWise ScreenConnect
105.0
100.0%KNOWNmultiple ransomware2024-02-22
6CVE-2024-21412Microsoft Windows
103.9
95.4%KNOWNWater Hydra2024-02-13
7CVE-2023-46604Apache ActiveMQ
103.0
99.7%KNOWNmultiple2023-11-02
8CVE-2023-4966Citrix NetScaler ADC and NetScaler
102.9
100.0%KNOWNLockBit2023-10-18
9CVE-2023-22515Atlassian Confluence Data Center and S
102.5
99.2%KNOWNnation-state + criminal2023-10-05
10CVE-2024-21762Fortinet FortiOS
101.6
84.3%KNOWNmultiple2024-02-09
11CVE-2023-3519Citrix NetScaler ADC and NetScaler
101.3
99.7%KNOWNmultiple2023-07-19
12CVE-2023-34362Progress MOVEit Transfer
100.6
99.9%KNOWNClop (TA505/FIN11)2023-06-02
13CVE-2021-45046Apache Log4j2
100.0
100.0%KNOWNmultiple2023-05-01
14CVE-2023-27350PaperCut MF/NG
99.9
100.0%KNOWNClop, LockBit2023-04-21
15CVE-2023-0669Fortra GoAnywhere MFT
98.7
100.0%KNOWNClop (TA505)2023-02-10
16CVE-2022-41040Microsoft Exchange Server
96.5
100.0%KNOWNmultiple ransomware2022-09-30
17CVE-2022-41082Microsoft Exchange Server
96.5
100.0%KNOWNmultiple ransomware2022-09-30
18CVE-2022-26134Atlassian Confluence Server/Data Cente
95.0
100.0%KNOWNmultiple2022-06-02
19CVE-2022-1388F5 BIG-IP
95.0
100.0%KNOWNmultiple2022-05-10
20CVE-2020-0796Microsoft SMBv3
95.0
99.8%KNOWNmultiple2022-02-10
21CVE-2021-44228Apache Log4j2
95.0
100.0%KNOWNmultiple (APT + criminal)2021-12-10
22CVE-2017-5638Apache Struts
95.0
100.0%KNOWNmultiple2021-11-03
23CVE-2019-0708Microsoft Remote Desktop Services
95.0
100.0%KNOWNmultiple2021-11-03
24CVE-2017-11882Microsoft Office
95.0
99.9%KNOWNmultiple (commodity + APT)2021-11-03
25CVE-2018-13379Fortinet FortiOS
95.0
100.0%KNOWNmultiple ransomware2021-11-03

🛡 Vulnerability → Malware / Ransomware / Actor

Type a full CVE id (e.g. CVE-2023-34362) for the full dossier — EPSS, KEV due-date, attributed malware/actors, entity graph & OSINT pivots.

26 vulnerabilities (use the ⇩ CSV button to export the filtered view)

CVEVendor / ProductEPSSRansomwareMalware / RansomwareActorsAddedDue date
CVE-2025-22225VMware ESXi1.0%KNOWNransomware (KEV-flagged)—2025-03-042025-03-25 ⚠
CVE-2024-37085VMware ESXi26.0%KNOWNBlack Basta, Akira (VMware ESXi)Black Basta, Akira2024-07-302024-08-20 ⚠
CVE-2022-22954VMware Workspace ONE Access and Ident100.0%KNOWNransomware (KEV-flagged)—2022-04-142022-05-05 ⚠
CVE-2021-21975VMware vRealize Operations Manager AP78.3%KNOWNransomware (KEV-flagged)—2022-01-182022-02-01 ⚠
CVE-2019-5544VMware VMware ESXi and Horizon DaaS96.8%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-3992VMware ESXi83.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2021-21972VMware vCenter Server99.5%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-21985VMware vCenter Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-22005VMware vCenter Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2025-22224VMware ESXi and Workstation1.6%———2025-03-042025-03-25 ⚠
CVE-2025-22226VMware ESXi, Workstation, and Fusion1.7%———2025-03-042025-03-25 ⚠
CVE-2024-38812VMware vCenter Server54.6%———2024-11-202024-12-11 ⚠
CVE-2024-38813VMware vCenter Server17.4%———2024-11-202024-12-11 ⚠
CVE-2022-22948VMware vCenter Server13.8%———2024-07-172024-08-07 ⚠
CVE-2023-34048VMware vCenter Server99.4%———2024-01-222024-02-12 ⚠
CVE-2023-20867VMware Tools13.5%———2023-06-232023-07-14 ⚠
CVE-2023-20887VMware Aria Operations for Networks98.3%———2023-06-222023-07-13 ⚠
CVE-2022-22947VMware Spring Cloud Gateway98.3%———2022-05-162022-06-06 ⚠
CVE-2022-22960VMware Multiple Products36.4%———2022-04-152022-05-06 ⚠
CVE-2022-22965VMware Spring Framework99.7%———2022-04-042022-04-25 ⚠
CVE-2018-6961VMware SD-WAN Edge86.4%———2022-03-252022-04-15 ⚠
CVE-2021-21973VMware vCenter Server and Cloud Found88.0%———2022-03-072022-03-21 ⚠
CVE-2021-22017VMware vCenter Server49.2%———2022-01-102022-01-24 ⚠
CVE-2020-3950VMware Multiple Products7.3%———2021-11-032022-05-03 ⚠
CVE-2020-3952VMware vCenter Server90.4%———2021-11-032022-05-03 ⚠
CVE-2020-4006VMware Multiple Products23.8%———2021-11-032022-05-03 ⚠

🔗 Pivot

Exploit theater →Ransomware theater →Malware families →Actor profiles →Detection rules →Refresh KEV →Score EPSS →
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center