CISA's list that day
15 May 2025
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in DrayTek Vigor Routers, Google Chromium and SAP NetWeaver. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-12987OS Command Injection | DrayTek Vigor Routers | Patch this weekEPSS 0.98 | 0.98 | ||
| CVE-2025-42999Deserialization | SAP NetWeaver | Patch this weekRansomware use | 0.14 | ||
| CVE-2025-4664Loader Insufficient Policy Enforcement | Google Chromium | Removed from CISA's list | 0.06 |