CISA's list that day
3 December 2024
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in North Grid Proself, Zyxel Multiple Firewalls and ProjectSend. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-11680Improper Authentication | ProjectSend ProjectSend | Patch this weekMetasploit module; EPSS 0.92 | 0.92 | ||
| CVE-2024-11667Path Traversal | Zyxel Multiple Firewalls | Patch this weekRansomware use | 0.03 | ||
| CVE-2023-45727Improper Restriction of XML External Entity (XXE) Reference | North Grid Proself | Patch soon | 0.04 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.