CISA's list that day
10 January 2024
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Microsoft SharePoint Server and Ivanti Connect Secure and Policy Secure. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2023-29357Privilege Escalation | Microsoft SharePoint Server | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2023-46805Authentication Bypass | Ivanti Connect Secure and Policy Secure | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2024-21887Command Injection | Ivanti Connect Secure and Policy Secure | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.