CISA's list that day
10 December 2021
On CISA added 13 vulnerabilities to its list of exploited vulnerabilities, in Red Hat JBoss Seam 2, Red Hat JBoss Application Server, Embedthis GoAhead and 10 other products. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2010-1871Linux JBoss Seam 2 Remote Code Execution | Red Hat JBoss Seam 2 | Patch this weekMetasploit module; EPSS 0.83; verified Exploit-DB entry | 0.83 | ||
| CVE-2017-17562Remote Code Execution | Embedthis GoAhead | Patch this weekMetasploit module; EPSS 0.96; verified Exploit-DB entry | 0.96 | ||
| CVE-2019-13272Improper Privilege Management | Linux Kernel | Patch this weekMetasploit module; EPSS 0.52; verified Exploit-DB entry | 0.52 | ||
| CVE-2017-12149Remote Code Execution | Red Hat JBoss Application Server | Patch this weekRansomware use; Metasploit module; EPSS 0.91 | 0.91 | ||
| CVE-2020-8816Remote Code Execution | Pi-hole AdminLTE | Patch this weekMetasploit module; EPSS 0.78 | 0.78 | ||
| CVE-2021-44228Remote Code Execution | Apache Log4j2 | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2019-0193DataImportHandler Code Injection | Apache Solr | Patch this weekEPSS 0.84 | 0.84 | ||
| CVE-2019-7238Incorrect Access Control | Sonatype Nexus Repository Manager | Patch this weekEPSS 0.77 | 0.77 | ||
| CVE-2019-10758Remote Code Execution | MongoDB mongo-express | Patch this weekEPSS 0.85 | 0.85 | ||
| CVE-2020-17463SQL Injection | Fuel CMS Fuel CMS | Patch this weekEPSS 0.90 | 0.90 | ||
| CVE-2021-35394Jungle SDK Remote Code Execution | Realtek Jungle Software Development Kit (SDK) | Patch this weekEPSS 0.99 | 0.99 | ||
| CVE-2021-44515Authentication Bypass | Zoho Desktop Central | Patch this weekEPSS 0.99 | 0.99 | ||
| CVE-2021-44168Arbitrary File Download | Fortinet FortiOS | Patch soon | 0.01 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.