https://patchfirst.co/technique/T1083/New and newly exploited CVEs that lead to ATT&CK T1083 File and Directory Discovery, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2017-12637/CVE-2017-12637#kevWed, 19 Mar 2025 00:00:00 GMTSAP · NetWeaver. In CISA KEV since 2025-03-19. ENISA EUVD lists it as exploited. EPSS 95.1% (higher than 99.86% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery; T1555 Credentials from Password Stores; T1592 Gather Victim Host Information. Priority 68.2 of 100.kevpublic-exploitT1190T1083T1555T1592https://patchfirst.co/cve/CVE-2024-53704/CVE-2024-53704#kevTue, 18 Feb 2025 00:00:00 GMTSonicWall · SonicOS. In CISA KEV since 2025-02-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.3% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1199 Trusted Relationship; T1212 Exploitation for Credential Access; T1078.004 Cloud Accounts; T1083 File and Directory Discovery. Priority 79.8 of 100.kevransomwarepublic-exploitT1199T1212T1078.004T1083https://patchfirst.co/cve/CVE-2023-28461/CVE-2023-28461#kevMon, 25 Nov 2024 00:00:00 GMTArray Networks · AG/vxAG ArrayOS. In CISA KEV since 2024-11-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 68.1% (higher than 99.32% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1083 File and Directory Discovery. Named in 1 threat report. Priority 78.6 of 100.kevransomwareT1190T1059T1083https://patchfirst.co/cve/CVE-2023-22952/CVE-2023-22952#kevThu, 02 Feb 2023 00:00:00 GMTSugarCRM · Multiple Products. In CISA KEV since 2023-02-02. ENISA EUVD lists it as exploited. EPSS 80.1% (higher than 99.62% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1021.001 Remote Desktop Protocol; T1070.004 File Deletion; T1078 Valid Accounts; T1083 File and Directory Discovery; +3 more. Priority 69.1 of 100.kevpublic-exploitT1190T1059T1021.001T1070.004T1078T1083T1482T1505.003T1530https://patchfirst.co/cve/CVE-2016-3298/CVE-2016-3298#kevTue, 24 May 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-05-24. ENISA EUVD lists it as exploited. EPSS 33.3% (higher than 98.4% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1083 File and Directory Discovery; T1189 Drive-by Compromise. Priority 57.2 of 100.kevT1083T1189https://patchfirst.co/cve/CVE-2016-0162/CVE-2016-0162#kevTue, 24 May 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-05-24. ENISA EUVD lists it as exploited. EPSS 21.9% (higher than 97.7% of CVEs). CVSS 4.3 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1083 File and Directory Discovery. Priority 45.5 of 100.kevT1189T1083https://patchfirst.co/cve/CVE-2019-0676/CVE-2019-0676#kevMon, 23 May 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 8.1% (higher than 94.8% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1083 File and Directory Discovery. Priority 46.5 of 100.kevT1189T1083https://patchfirst.co/cve/CVE-2019-7483/CVE-2019-7483#kevMon, 28 Mar 2022 00:00:00 GMTSonicWall · SMA100. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery. Priority 61.4 of 100.kevT1190T1083https://patchfirst.co/cve/CVE-2019-11510/CVE-2019-11510#kevWed, 03 Nov 2021 00:00:00 GMTIvanti · Pulse Connect Secure. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1083 File and Directory Discovery; T1552.001 Credentials In Files. Named in 6 threat reports. Priority 90.0 of 100.kevransomwarepublic-exploitT1133T1059T1083T1552.001https://patchfirst.co/cve/CVE-2019-19781/CVE-2019-19781#kevWed, 03 Nov 2021 00:00:00 GMTCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1083 File and Directory Discovery. Named in 8 threat reports. Priority 89.9 of 100.kevransomwarepublic-exploitT1133T1059T1083https://patchfirst.co/cve/CVE-2018-10590/CVE-2018-10590Tue, 15 May 2018 00:00:00 GMTAdvantech · WebAccess. Not in CISA KEV. EPSS 1.6% (higher than 76.2% of CVEs). ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery. Priority 15.2 of 100.T1190T1083https://patchfirst.co/cve/CVE-2008-6508/CVE-2008-6508Mon, 23 Mar 2009 00:00:00 GMTNot in CISA KEV. EPSS 83.7% (higher than 99.69% of CVEs). Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery. Named in 1 threat report. Priority 29.9 of 100.public-exploitT1190T1083