CISA's list that day

25 March 2024

On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Nice Linear eMerge E3-Series, Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) and Fortinet FortiClient EMS. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2019-7256OS Command InjectionNice Linear eMerge E3-SeriesPatch this weekMetasploit module; EPSS 0.970.97
CVE-2021-44529Code InjectionIvanti Endpoint Manager Cloud Service Appliance (EPM CSA)Patch this weekRansomware use; Metasploit module; EPSS 0.990.99
CVE-2023-48788SQL InjectionFortinet FortiClient EMSPatch this weekRansomware use; Metasploit module; EPSS 0.980.98

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.