{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1059.007 JavaScript","home_page_url":"https://patchfirst.co/technique/T1059.007/","feed_url":"https://patchfirst.co/feed/technique/T1059.007.json","description":"New and newly exploited CVEs that lead to ATT&CK T1059.007 JavaScript, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-42897#kev","url":"https://patchfirst.co/cve/CVE-2026-42897/","title":"[KEV] CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability","content_text":"Microsoft · Microsoft. In CISA KEV since 2026-05-15. ENISA EUVD lists it as exploited. EPSS 70.7% (higher than 99.39% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 72.1 of 100.","summary":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","date_published":"2026-05-15T00:00:00.000Z","date_modified":"2026-10-26T14:10:00.000Z","tags":["kev","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":72.1,"kev":{"dateAdded":"2026-05-15","ransomware":false},"epss":{"score":0.70662,"percentile":0.99393},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Microsoft","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-48700#kev","url":"https://patchfirst.co/cve/CVE-2025-48700/","title":"[KEV] CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1056 Input Capture; T1059.007 JavaScript. Priority 62.7 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","date_published":"2026-04-20T00:00:00.000Z","date_modified":"2026-06-17T09:30:11.000Z","tags":["kev","T1566.002","T1056","T1059.007"],"_patchfirst":{"reason":"kev","priority":62.7,"kev":{"dateAdded":"2026-04-20","ransomware":false},"epss":{"score":0.01713,"percentile":0.77356},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566.002","T1056","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-66376#kev","url":"https://patchfirst.co/cve/CVE-2025-66376/","title":"[KEV] CVE-2025-66376: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-03-18. ENISA EUVD lists it as exploited. EPSS 20.2% (higher than 97.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.001 Spearphishing Attachment; T1059.007 JavaScript. Priority 66.8 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","date_published":"2026-03-18T00:00:00.000Z","date_modified":"2026-10-07T10:10:00.000Z","tags":["kev","T1566.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2026-03-18","ransomware":false},"epss":{"score":0.20227,"percentile":0.97463},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566.001","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-68461#kev","url":"https://patchfirst.co/cve/CVE-2025-68461/","title":"[KEV] CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2026-02-20. ENISA EUVD lists it as exploited. EPSS 27.4% (higher than 98.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 71.9 of 100.","summary":"RoundCube Webmail Cross-site Scripting Vulnerability","date_published":"2026-02-20T00:00:00.000Z","date_modified":"2026-06-17T09:59:06.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":71.9,"kev":{"dateAdded":"2026-02-20","ransomware":false},"epss":{"score":0.27407,"percentile":0.98064},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-26829#kev","url":"https://patchfirst.co/cve/CVE-2021-26829/","title":"[KEV] CVE-2021-26829: OpenPLC ScadaBR Cross-site Scripting Vulnerability","content_text":"OpenPLC · ScadaBR. In CISA KEV since 2025-11-28. ENISA EUVD lists it as exploited. EPSS 48.0% (higher than 98.9% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1059.007 JavaScript. Priority 66.6 of 100.","summary":"OpenPLC ScadaBR Cross-site Scripting Vulnerability","date_published":"2025-11-28T00:00:00.000Z","date_modified":"2026-06-17T03:43:50.000Z","tags":["kev","public-exploit","T1059.007"],"_patchfirst":{"reason":"kev","priority":66.6,"kev":{"dateAdded":"2025-11-28","ransomware":false},"epss":{"score":0.4805,"percentile":0.98855},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"OpenPLC","product":"ScadaBR","techniqueIds":["T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2010-3765#kev","url":"https://patchfirst.co/cve/CVE-2010-3765/","title":"[KEV] CVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerability","content_text":"Mozilla · Multiple Products. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 83.2% (higher than 99.68% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript. Priority 69.8 of 100.","summary":"Mozilla Multiple Products Remote Code Execution Vulnerability","date_published":"2025-10-06T00:00:00.000Z","date_modified":"2026-06-16T23:23:28.000Z","tags":["kev","public-exploit","T1059.007"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2025-10-06","ransomware":false},"epss":{"score":0.83156,"percentile":0.99676},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Mozilla","product":"Multiple Products","techniqueIds":["T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-3893#kev","url":"https://patchfirst.co/cve/CVE-2013-3893/","title":"[KEV] CVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2025-08-12. ENISA EUVD lists it as exploited. EPSS 87.6% (higher than 99.76% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 54.1 of 100.","summary":"Microsoft Internet Explorer Resource Management Errors Vulnerability","date_published":"2025-08-12T00:00:00.000Z","date_modified":"2026-06-16T23:55:58.000Z","tags":["kev","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":54.1,"kev":{"dateAdded":"2025-08-12","ransomware":false},"epss":{"score":0.87639,"percentile":0.99759},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-34028#kev","url":"https://patchfirst.co/cve/CVE-2025-34028/","title":"[KEV] CVE-2025-34028: Commvault Command Center Path Traversal Vulnerability","content_text":"Commvault · Command Center. In CISA KEV since 2025-05-02. ENISA EUVD lists it as exploited. EPSS 97.6% (higher than 99.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript. Priority 70.0 of 100.","summary":"Commvault Command Center Path Traversal Vulnerability","date_published":"2025-05-02T00:00:00.000Z","date_modified":"2026-06-17T09:13:20.000Z","tags":["kev","public-exploit","T1190","T1059.007"],"_patchfirst":{"reason":"kev","priority":70,"kev":{"dateAdded":"2025-05-02","ransomware":false},"epss":{"score":0.97604,"percentile":0.99902},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Commvault","product":"Command Center","techniqueIds":["T1190","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-11023#kev","url":"https://patchfirst.co/cve/CVE-2020-11023/","title":"[KEV] CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability","content_text":"JQuery · JQuery. In CISA KEV since 2025-01-23. ENISA EUVD lists it as exploited. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 67.2 of 100.","summary":"JQuery Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-01-23T00:00:00.000Z","date_modified":"2026-06-17T02:48:52.000Z","tags":["kev","public-exploit","T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2025-01-23","ransomware":false},"epss":{"score":0.84887,"percentile":0.99711},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"JQuery","product":"JQuery","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-2120#kev","url":"https://patchfirst.co/cve/CVE-2014-2120/","title":"[KEV] CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","content_text":"Cisco · Adaptive Security Appliance (ASA). In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS 22.6% (higher than 97.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 61.8 of 100.","summary":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-11-12T00:00:00.000Z","date_modified":"2026-06-17T00:06:05.000Z","tags":["kev","T1204.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":61.8,"kev":{"dateAdded":"2024-11-12","ransomware":false},"epss":{"score":0.22558,"percentile":0.97711},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Adaptive Security Appliance (ASA)","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-37383#kev","url":"https://patchfirst.co/cve/CVE-2024-37383/","title":"[KEV] CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2024-10-24. ENISA EUVD lists it as exploited. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.2 of 100.","summary":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-10-24T00:00:00.000Z","date_modified":"2026-06-17T07:38:15.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2024-10-24","ransomware":false},"epss":{"score":0.73995,"percentile":0.9948},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-5631#kev","url":"https://patchfirst.co/cve/CVE-2023-5631/","title":"[KEV] CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2023-10-26. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1041 Exfiltration Over C2 Channel. Priority 66.7 of 100.","summary":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-10-26T00:00:00.000Z","date_modified":"2026-06-17T06:48:58.000Z","tags":["kev","public-exploit","T1204.001","T1059.007","T1041"],"_patchfirst":{"reason":"kev","priority":66.7,"kev":{"dateAdded":"2023-10-26","ransomware":false},"epss":{"score":0.76337,"percentile":0.99538},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1204.001","T1059.007","T1041"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-22515#kev","url":"https://patchfirst.co/cve/CVE-2023-22515/","title":"[KEV] CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","content_text":"Atlassian · Confluence Data Center and Server. In CISA KEV since 2023-10-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1136 Create Account; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 79.8 of 100.","summary":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","date_published":"2023-10-05T00:00:00.000Z","date_modified":"2026-06-17T05:35:37.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059.007","T1136","T1059","T1078"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2023-10-05","ransomware":true},"epss":{"score":0.99223,"percentile":0.99935},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Data Center and Server","techniqueIds":["T1190","T1059.007","T1136","T1059","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-37580","url":"https://patchfirst.co/cve/CVE-2023-37580/","title":"CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-07-27. ENISA EUVD lists it as exploited. EPSS 49.1% (higher than 98.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.0 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-07-31T00:00:00.000Z","date_modified":"2026-06-17T06:08:30.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"published","priority":67,"kev":{"dateAdded":"2023-07-27","ransomware":false},"epss":{"score":0.49083,"percentile":0.98882},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-27926#kev","url":"https://patchfirst.co/cve/CVE-2022-27926/","title":"[KEV] CVE-2022-27926: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-04-03. ENISA EUVD lists it as exploited. EPSS 17.6% (higher than 97.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Named in 1 threat report. Priority 70.6 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-04-03T00:00:00.000Z","date_modified":"2026-06-17T04:37:45.000Z","tags":["kev","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":70.6,"kev":{"dateAdded":"2023-04-03","ransomware":false},"epss":{"score":0.17634,"percentile":0.97146},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1189","T1059.007"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-26360","url":"https://patchfirst.co/cve/CVE-2023-26360/","title":"CVE-2023-26360: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","content_text":"Adobe · ColdFusion. In CISA KEV since 2023-03-15. ENISA EUVD lists it as exploited. EPSS 97.3% (higher than 99.9% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1003.001 LSASS Memory; T1036.005 Match Legitimate Resource Name or Location; T1046 Network Service Discovery; T1071.001 Web Protocols; +3 more. Priority 69.0 of 100.","summary":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","date_published":"2023-03-23T00:00:00.000Z","date_modified":"2026-06-17T05:43:10.000Z","tags":["kev","public-exploit","T1190","T1059.007","T1003.001","T1036.005","T1046","T1071.001","T1105","T1484.001","T1505.003"],"_patchfirst":{"reason":"published","priority":69,"kev":{"dateAdded":"2023-03-15","ransomware":false},"epss":{"score":0.97339,"percentile":0.99897},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"ColdFusion","techniqueIds":["T1190","T1059.007","T1003.001","T1036.005","T1046","T1071.001","T1105","T1484.001","T1505.003"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-22963#kev","url":"https://patchfirst.co/cve/CVE-2022-22963/","title":"[KEV] CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","content_text":"VMware Tanzu · Spring Cloud. In CISA KEV since 2022-08-25. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1505.003 Web Shell. Priority 69.9 of 100.","summary":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","date_published":"2022-08-25T00:00:00.000Z","date_modified":"2026-06-17T04:29:15.000Z","tags":["kev","public-exploit","T1190","T1059.007","T1505.003"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2022-08-25","ransomware":false},"epss":{"score":0.99938,"percentile":0.99971},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"VMware Tanzu","product":"Spring Cloud","techniqueIds":["T1190","T1059.007","T1505.003"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-4990#kev","url":"https://patchfirst.co/cve/CVE-2018-4990/","title":"[KEV] CVE-2018-4990: Adobe Acrobat and Reader Double Free Vulnerability","content_text":"Adobe · Acrobat and Reader. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 35.9% (higher than 98.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1204.002 Malicious File. Priority 63.9 of 100.","summary":"Adobe Acrobat and Reader Double Free Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T01:59:25.000Z","tags":["kev","T1059.007","T1204.002"],"_patchfirst":{"reason":"kev","priority":63.9,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.3594,"percentile":0.98468},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Acrobat and Reader","techniqueIds":["T1059.007","T1204.002"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-19953#kev","url":"https://patchfirst.co/cve/CVE-2018-19953/","title":"[KEV] CVE-2018-19953: QNAP NAS File Station Cross-Site Scripting Vulnerability","content_text":"QNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.5% (higher than 98.2% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 71.9 of 100.","summary":"QNAP NAS File Station Cross-Site Scripting Vulnerability","date_published":"2022-05-24T00:00:00.000Z","date_modified":"2026-10-01T20:17:17.000Z","tags":["kev","ransomware","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":71.9,"kev":{"dateAdded":"2022-05-24","ransomware":true},"epss":{"score":0.30527,"percentile":0.98236},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP","product":"Network Attached Storage (NAS)","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-19943#kev","url":"https://patchfirst.co/cve/CVE-2018-19943/","title":"[KEV] CVE-2018-19943: QNAP NAS File Station Cross-Site Scripting Vulnerability","content_text":"QNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 22.7% (higher than 97.7% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 71.3 of 100.","summary":"QNAP NAS File Station Cross-Site Scripting Vulnerability","date_published":"2022-05-24T00:00:00.000Z","date_modified":"2026-08-13T05:17:17.000Z","tags":["kev","ransomware","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":71.3,"kev":{"dateAdded":"2022-05-24","ransomware":true},"epss":{"score":0.22682,"percentile":0.9772},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"QNAP","product":"Network Attached Storage (NAS)","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-18426#kev","url":"https://patchfirst.co/cve/CVE-2019-18426/","title":"[KEV] CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability","content_text":"Meta Platforms · WhatsApp. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 67.9% (higher than 99.32% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1005 Data from Local System; T1059.007 JavaScript. Priority 78.6 of 100.","summary":"WhatsApp Cross-Site Scripting Vulnerability","date_published":"2022-05-23T00:00:00.000Z","date_modified":"2026-06-17T02:25:01.000Z","tags":["kev","public-exploit","T1204.001","T1005","T1059.007"],"_patchfirst":{"reason":"kev","priority":78.6,"kev":{"dateAdded":"2022-05-23","ransomware":false},"epss":{"score":0.67859,"percentile":0.99318},"cvss":{"score":8.2,"severity":"HIGH","version":"3.1"},"vendor":"Meta Platforms","product":"WhatsApp","techniqueIds":["T1204.001","T1005","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2016-0189#kev","url":"https://patchfirst.co/cve/CVE-2016-0189/","title":"[KEV] CVE-2016-0189: Microsoft Internet Explorer Memory Corruption Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2022-03-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.1% (higher than 99.85% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Named in 1 threat report. Priority 82.1 of 100.","summary":"Microsoft Internet Explorer Memory Corruption Vulnerability","date_published":"2022-03-28T00:00:00.000Z","date_modified":"2026-06-17T00:37:05.000Z","tags":["kev","ransomware","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":82.1,"kev":{"dateAdded":"2022-03-28","ransomware":true},"epss":{"score":0.94062,"percentile":0.99847},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1059.007"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2015-2419#kev","url":"https://patchfirst.co/cve/CVE-2015-2419/","title":"[KEV] CVE-2015-2419: Microsoft Internet Explorer Memory Corruption Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 53.0% (higher than 99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1189 Drive-by Compromise. Named in 1 threat report. Priority 67.8 of 100.","summary":"Microsoft Internet Explorer Memory Corruption Vulnerability","date_published":"2022-03-28T00:00:00.000Z","date_modified":"2026-06-17T00:24:04.000Z","tags":["kev","public-exploit","T1059.007","T1189"],"_patchfirst":{"reason":"kev","priority":67.8,"kev":{"dateAdded":"2022-03-28","ransomware":false},"epss":{"score":0.5298,"percentile":0.98976},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1059.007","T1189"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2015-5119#kev","url":"https://patchfirst.co/cve/CVE-2015-5119/","title":"[KEV] CVE-2015-5119: Adobe Flash Player Use-After-Free Vulnerability","content_text":"Adobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1566.002 Spearphishing Link; T1105 Ingress Tool Transfer; T1055.001 Dynamic-link Library Injection; T1071.001 Web Protocols. Named in 5 threat reports. Priority 74.8 of 100.","summary":"Adobe Flash Player Use-After-Free Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T00:28:28.000Z","tags":["kev","public-exploit","T1059.007","T1566.002","T1105","T1055.001","T1071.001"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.98618,"percentile":0.99923},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1059.007","T1566.002","T1105","T1055.001","T1071.001"],"reportCount":5,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-3346#kev","url":"https://patchfirst.co/cve/CVE-2013-3346/","title":"[KEV] CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability","content_text":"Adobe · Reader and Acrobat. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 78.9% (higher than 99.59% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript. Priority 54.8 of 100.","summary":"Adobe Reader and Acrobat Memory Corruption Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-16T23:54:55.000Z","tags":["kev","public-exploit","T1059.007"],"_patchfirst":{"reason":"kev","priority":54.8,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.78913,"percentile":0.99593},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Adobe","product":"Reader and Acrobat","techniqueIds":["T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-24682#kev","url":"https://patchfirst.co/cve/CVE-2022-24682/","title":"[KEV] CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.","summary":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","date_published":"2022-02-25T00:00:00.000Z","date_modified":"2026-08-07T05:16:55.000Z","tags":["kev","ransomware","public-exploit","T1204.001","T1059.007","T1185"],"_patchfirst":{"reason":"kev","priority":76.9,"kev":{"dateAdded":"2022-02-25","ransomware":true},"epss":{"score":0.30931,"percentile":0.98256},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaborate Suite (ZCS)","techniqueIds":["T1204.001","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-37975#kev","url":"https://patchfirst.co/cve/CVE-2021-37975/","title":"[KEV] CVE-2021-37975: Google Chromium V8 Use-After-Free Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 34.9% (higher than 98.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 68.8 of 100.","summary":"Google Chromium V8 Use-After-Free Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T04:01:20.000Z","tags":["kev","public-exploit","T1059.007","T1203"],"_patchfirst":{"reason":"kev","priority":68.8,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.34887,"percentile":0.98429},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1059.007","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-21148#kev","url":"https://patchfirst.co/cve/CVE-2021-21148/","title":"[KEV] CVE-2021-21148: Google Chromium V8 Heap Buffer Overflow Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 20.0% (higher than 97.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 68.6 of 100.","summary":"Google Chromium V8 Heap Buffer Overflow Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:34:54.000Z","tags":["kev","public-exploit","T1059.007","T1203"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.19968,"percentile":0.97432},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1059.007","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-21166#kev","url":"https://patchfirst.co/cve/CVE-2021-21166/","title":"[KEV] CVE-2021-21166: Google Chromium Race Condition Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 24.0% (higher than 97.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 63.7 of 100.","summary":"Google Chromium Race Condition Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:34:57.000Z","tags":["kev","T1059.007","T1203"],"_patchfirst":{"reason":"kev","priority":63.7,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.24027,"percentile":0.97841},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1059.007","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-21206#kev","url":"https://patchfirst.co/cve/CVE-2021-21206/","title":"[KEV] CVE-2021-21206: Google Chromium Blink Use-After-Free Vulnerability","content_text":"Google · Chromium Blink. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 63.2 of 100.","summary":"Google Chromium Blink Use-After-Free Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:35:02.000Z","tags":["kev","T1059.007","T1203"],"_patchfirst":{"reason":"kev","priority":63.2,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.09307,"percentile":0.95366},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium Blink","techniqueIds":["T1059.007","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-30554#kev","url":"https://patchfirst.co/cve/CVE-2021-30554/","title":"[KEV] CVE-2021-30554: Google Chromium WebGL Use-After-Free Vulnerability","content_text":"Google · Chromium WebGL. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 7.4% (higher than 94.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 63.0 of 100.","summary":"Google Chromium WebGL Use-After-Free Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:50:27.000Z","tags":["kev","T1059.007","T1203"],"_patchfirst":{"reason":"kev","priority":63,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.07367,"percentile":0.94405},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium WebGL","techniqueIds":["T1059.007","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-3137","url":"https://patchfirst.co/cve/CVE-2020-3137/","title":"CVE-2020-3137: Cisco Email Security Appliance Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 0.8% (higher than 57.8% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.8 of 100.","summary":"Cisco Email Security Appliance Cross-Site Scripting Vulnerability","date_published":"2020-09-23T00:00:00.000Z","date_modified":"2024-11-13T18:06:49.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.8,"kev":null,"epss":{"score":0.0084,"percentile":0.57838},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Email Security Appliance (ESA)","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3349","url":"https://patchfirst.co/cve/CVE-2020-3349/","title":"CVE-2020-3349: Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.3 of 100.","summary":"Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities","date_published":"2020-07-16T00:00:00.000Z","date_modified":"2024-11-15T16:54:36.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.3,"kev":null,"epss":{"score":0.00622,"percentile":0.49814},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3356","url":"https://patchfirst.co/cve/CVE-2020-3356/","title":"CVE-2020-3356: Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.6 of 100.","summary":"Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability","date_published":"2020-06-18T00:00:00.000Z","date_modified":"2024-11-15T17:05:48.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.00801,"percentile":0.56584},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3233","url":"https://patchfirst.co/cve/CVE-2020-3233/","title":"CVE-2020-3233: Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco IOx. Not in CISA KEV. EPSS 0.6% (higher than 50.3% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.5 of 100.","summary":"Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability","date_published":"2020-06-03T00:00:00.000Z","date_modified":"2024-11-15T17:12:07.000Z","tags":["T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.5,"kev":null,"epss":{"score":0.00633,"percentile":0.50304},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco IOx","techniqueIds":["T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11082","url":"https://patchfirst.co/cve/CVE-2020-11082/","title":"CVE-2020-11082: Cross-Site Scripting in Kaminari","content_text":"kaminari · Kaminari. Not in CISA KEV. EPSS 1.5% (higher than 75% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.5 of 100.","summary":"Cross-Site Scripting in Kaminari","date_published":"2020-05-28T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.01546,"percentile":0.74963},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"kaminari","product":"Kaminari","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11036","url":"https://patchfirst.co/cve/CVE-2020-11036/","title":"CVE-2020-11036: XSS in GLPI","content_text":"glpi-project · GLPI. Not in CISA KEV. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 7.6 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 16.7 of 100.","summary":"XSS in GLPI","date_published":"2020-05-05T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00804,"percentile":0.56713},"cvss":{"score":7.6,"severity":"HIGH","version":"3.1"},"vendor":"glpi-project","product":"GLPI","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5336","url":"https://patchfirst.co/cve/CVE-2020-5336/","title":"CVE-2020-5336: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","content_text":"Dell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.","summary":"RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","date_published":"2020-05-04T00:00:00.000Z","date_modified":"2024-09-17T03:14:04.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00705,"percentile":0.53336},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"RSA Archer","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11030","url":"https://patchfirst.co/cve/CVE-2020-11030/","title":"CVE-2020-11030: Cross-site scripting (XSS) in Search block in WordPress","content_text":"WordPress · WordPress. Not in CISA KEV. EPSS 1.4% (higher than 73.1% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.1 of 100.","summary":"Cross-site scripting (XSS) in Search block in WordPress","date_published":"2020-04-30T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":19.1,"kev":null,"epss":{"score":0.01437,"percentile":0.73113},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"WordPress","product":"WordPress","techniqueIds":["T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5270","url":"https://patchfirst.co/cve/CVE-2020-5270/","title":"CVE-2020-5270: Open redirection when using back parameter of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 57.6% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1005 Data from Local System; T1036 Masquerading; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.4 of 100.","summary":"Open redirection when using back parameter of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1566.002","T1005","T1036","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.4,"kev":null,"epss":{"score":0.00832,"percentile":0.57598},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1566.002","T1005","T1036","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5269","url":"https://patchfirst.co/cve/CVE-2020-5269/","title":"CVE-2020-5269: Reflected XSS on AdminFeatures page of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.","summary":"Reflected XSS on AdminFeatures page of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00809,"percentile":0.56848},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5271","url":"https://patchfirst.co/cve/CVE-2020-5271/","title":"CVE-2020-5271: Reflected XSS with dashboard calendar of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.","summary":"Reflected XSS with dashboard calendar of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00809,"percentile":0.56848},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5264","url":"https://patchfirst.co/cve/CVE-2020-5264/","title":"CVE-2020-5264: Reflected XSS in security compromised page of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 55.1% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.1 of 100.","summary":"Reflected XSS in security compromised page of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00755,"percentile":0.55097},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5266","url":"https://patchfirst.co/cve/CVE-2020-5266/","title":"CVE-2020-5266: Stored XSS on back office edit page","content_text":"PrestaShop · ps_linklist. Not in CISA KEV. EPSS 0.6% (higher than 50.5% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.2 of 100.","summary":"Stored XSS on back office edit page","date_published":"2020-04-16T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1189","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.2,"kev":null,"epss":{"score":0.00638,"percentile":0.50536},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"ps_linklist","techniqueIds":["T1189","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5339","url":"https://patchfirst.co/cve/CVE-2020-5339/","title":"CVE-2020-5339: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.","summary":"RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","date_published":"2020-03-25T00:00:00.000Z","date_modified":"2024-09-17T00:06:00.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00669,"percentile":0.51912},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5340","url":"https://patchfirst.co/cve/CVE-2020-5340/","title":"CVE-2020-5340: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.","summary":"RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","date_published":"2020-03-25T00:00:00.000Z","date_modified":"2024-09-17T03:43:40.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00669,"percentile":0.51912},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18578","url":"https://patchfirst.co/cve/CVE-2019-18578/","title":"CVE-2019-18578: Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability","content_text":"Dell · XtremIO. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 19.6 of 100.","summary":"Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability","date_published":"2020-03-13T00:00:00.000Z","date_modified":"2024-09-16T23:41:09.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.01127,"percentile":0.66293},"cvss":{"score":9,"severity":"CRITICAL","version":"3.0"},"vendor":"Dell","product":"XtremIO","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3121","url":"https://patchfirst.co/cve/CVE-2020-3121/","title":"CVE-2020-3121: Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco 550X Series Stackable Managed Switches. Not in CISA KEV. EPSS 1.1% (higher than 64.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.","summary":"Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability","date_published":"2020-01-26T00:00:00.000Z","date_modified":"2024-11-15T17:45:38.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.01066,"percentile":0.64723},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco 550X Series Stackable Managed Switches","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18571","url":"https://patchfirst.co/cve/CVE-2019-18571/","title":"CVE-2019-18571: The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","content_text":"Dell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 0.5% (higher than 43% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 12.4 of 100.","summary":"The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","date_published":"2019-12-18T00:00:00.000Z","date_modified":"2024-09-16T19:10:42.000Z","tags":["T1204.002","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":12.4,"kev":null,"epss":{"score":0.00503,"percentile":0.43038},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Identity Governance & Lifecycle","techniqueIds":["T1204.002","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-15994","url":"https://patchfirst.co/cve/CVE-2019-15994/","title":"CVE-2019-15994: Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Stealthwatch Enterprise. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.1 of 100.","summary":"Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability","date_published":"2019-11-26T00:00:00.000Z","date_modified":"2024-11-21T19:04:42.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00801,"percentile":0.56586},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Stealthwatch Enterprise","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}