CISA's list that day

7 January 2025

On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Oracle WebLogic Server and Mitel MiCollab. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2020-2883UnspecifiedOracle WebLogic ServerPatch this weekMetasploit module; EPSS 0.950.95
CVE-2024-41713Path TraversalMitel MiCollabPatch this weekRansomware use; EPSS 0.980.98
CVE-2024-55550Path TraversalMitel MiCollabPatch this weekRansomware use0.38

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.