CISA's list that day

28 July 2025

On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in PaperCut NG/MF and Cisco Identity Services Engine. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2025-20281InjectionCisco Identity Services EnginePatch this weekEPSS 0.980.98
CVE-2025-20337InjectionCisco Identity Services EnginePatch this weekEPSS 0.680.68
CVE-2023-2533Cross-Site Request Forgery (CSRF)PaperCut NG/MFPatch soon0.29

Other changes that day

  1. CVE-2025-49706 Microsoft SharePointEdited: notes.