CISA's list that day

8 January 2025

On CISA added 1 vulnerability to its list of exploited vulnerabilities: CVE-2025-0282 in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. US federal agencies must fix it by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2025-0282Stack-Based Buffer OverflowIvanti Connect Secure, Policy Secure, and ZTA GatewaysPatch this weekRansomware use; EPSS 0.990.99

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.