CISA's list that day
2 February 2023
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Oracle E-Business Suite and SugarCRM Multiple Products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2022-21587Unspecified | Oracle E-Business Suite | Patch this weekRansomware use; Metasploit module; EPSS 0.98 | 0.98 | ||
| CVE-2023-22952Multiple SugarCRM Products Remote Code Execution | SugarCRM Multiple Products | Patch this weekMetasploit module; EPSS 0.80 | 0.80 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.