CISA's list that day
29 July 2024
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Acronis Cyber Infrastructure (ACI) and ServiceNow Utah, Vancouver, and Washington DC Now Platform. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2023-45249Insecure Default Password | Acronis Cyber Infrastructure (ACI) | Patch this weekMetasploit module; EPSS 0.53 | 0.53 | ||
| CVE-2024-4879Improper Input Validation | ServiceNow Utah, Vancouver, and Washington DC Now Platform | Patch this weekEPSS 0.99 | 0.99 | ||
| CVE-2024-5217Incomplete List of Disallowed Inputs | ServiceNow Utah, Vancouver, and Washington DC Now Platform | Patch this weekEPSS 0.99 | 0.99 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.