CISA's list that day
28 January 2022
On CISA added 8 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Internet Explorer, GNU Bourne-Again Shell (Bash), Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability and 4 other products. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2014-6271Arbitrary Code Execution | GNU Bourne-Again Shell (Bash) | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2017-5689Privilege Escalation | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | Patch this weekMetasploit module; EPSS 0.92 | 0.92 | ||
| CVE-2020-5722Networks UCM6200 Series SQL Injection | Grandstream UCM6200 | Patch this weekMetasploit module; EPSS 0.84 | 0.84 | ||
| CVE-2020-0787Background Intelligent Transfer Service (BITS) Improper Privilege Management | Microsoft Windows | Patch this weekRansomware use; Metasploit module | 0.43 | ||
| CVE-2014-7169Arbitrary Code Execution | GNU Bourne-Again Shell (Bash) | Patch this weekEPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2014-1776Memory Corruption | Microsoft Internet Explorer | Patch this weekEPSS 0.83 | 0.83 | ||
| CVE-2021-20038Stack-Based Buffer Overflow | SonicWall SMA 100 Appliances | Patch this weekRansomware use; EPSS 0.99 | 0.99 | ||
| CVE-2022-22587Memory Corruption | Apple iOS and macOS | Patch soon | 0.12 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.