Changes in April 2025

In CISA made 14 changes to its list that its own file does not keep.

  1. CVE-2025-30406 Gladinet CentreStackEdited: notes, description and name.
  2. CVE-2025-3928 Commvault Web ServerDeadline moved from 17 May 2025 to 19 May 2025.
  3. CVE-2015-2291 Intel Ethernet Diagnostics Driver for WindowsRansomware use: Unknown to Known.
  4. CVE-2023-44487 IETF HTTP/2Edited: notes and required action.
  5. CVE-2025-31161 CrushFTPRansomware use: Unknown to Known.
  6. CVE-2025-29824 Microsoft WindowsRansomware use: Unknown to Known.
  7. CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA GatewaysEdited: required action.
  8. CVE-2024-38094 Microsoft SharePointRansomware use: Unknown to Known.
  9. CVE-2024-30051 Microsoft DWM Core LibraryRansomware use: Unknown to Known.
  10. CVE-2024-3400 Palo Alto Networks PAN-OSRansomware use: Unknown to Known.
  11. CVE-2022-42475 Fortinet FortiOSRansomware use: Unknown to Known.
  12. CVE-2018-8639 Microsoft WindowsRansomware use: Unknown to Known.
  13. CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS)Ransomware use: Unknown to Known.
  14. CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS)Ransomware use: Unknown to Known.