CISA's list that day
12 May 2023
On CISA added 7 vulnerabilities to its list of exploited vulnerabilities, in Linux Kernel, Jenkins User Interface (UI), Oracle Java SE and JRockit and 3 other products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2021-3560Incorrect Authorization | Red Hat Polkit | Patch this weekMetasploit module; verified Exploit-DB entry | 0.24 | ||
| CVE-2010-3904Improper Input Validation | Linux Kernel | Patch this weekMetasploit module; verified Exploit-DB entry | 0.16 | ||
| CVE-2016-3427Unspecified | Oracle Java SE and JRockit | Patch this weekEPSS 0.92 | 0.92 | ||
| CVE-2016-8735Remote Code Execution | Apache Tomcat | Patch this weekEPSS 0.90 | 0.90 | ||
| CVE-2023-25717Multiple Ruckus Wireless Products CSRF and RCE | Ruckus Wireless Multiple Products | Patch this weekEPSS 0.98 | 0.98 | ||
| CVE-2014-0196Race Condition | Linux Kernel | Patch soon | 0.22 | ||
| CVE-2015-5317Information Disclosure | Jenkins Jenkins User Interface (UI) | Patch soon | 0.23 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.