CISA's list that day

21 January 2022

On 21 January 2022 CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Apache Struts 1, Apache Struts 2, Microsoft Win32k and 1 other product. The US federal deadlines run from 4 February 2022 to 21 July 2022.

Added that day

Added that day
Vulnerability	Product	Our group	Listed	Deadline	EPSS
CVE-2012-0391Improper Input Validation	Apache Struts 2	Patch this weekMetasploit module; EPSS 0.76; verified Exploit-DB entry	2022-01-21	2022-07-21	0.76	2022-01-21 · due 2022-07-21
CVE-2018-8453Privilege Escalation	Microsoft Win32k	Patch this weekRansomware use; Metasploit module; EPSS 0.70; verified Exploit-DB entry	2022-01-21	2022-07-21	0.70	2022-01-21 · due 2022-07-21
CVE-2006-1547ActionForm Denial-of-Service	Apache Struts 1	Patch this weekEPSS 0.55	2022-01-21	2022-07-21	0.55	2022-01-21 · due 2022-07-21
CVE-2021-35247Improper Input Validation	SolarWinds Serv-U	Patch soon	2022-01-21	2022-02-04	0.03	2022-01-21 · due 2022-02-04

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.