CISA's list that day

10 March 2023

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Plex Media Server and XStream. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2020-5741Remote Code ExecutionPlex Media ServerPatch this weekMetasploit module; EPSS 0.730.73
CVE-2021-39144Remote Code ExecutionXStream XStreamPatch this weekMetasploit module; EPSS 0.980.98

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.