https://patchfirst.co/technique/T1133/New and newly exploited CVEs that lead to ATT&CK T1133 External Remote Services, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-65400/CVE-2026-65400#kevTue, 18 Aug 2026 00:00:00 GMTApple · macOS. In CISA KEV since 2026-08-18. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1021 Remote Services. Priority 75.4 of 100.kevpublic-exploitT1133T1021https://patchfirst.co/cve/CVE-2026-50751/CVE-2026-50751#kevMon, 08 Jun 2026 00:00:00 GMTCheck Point · Security Gateway. In CISA KEV since 2026-06-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.3% (higher than 99.72% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1078 Valid Accounts. Priority 84.5 of 100.kevransomwarepublic-exploitT1133T1078https://patchfirst.co/cve/CVE-2026-0257/CVE-2026-0257#kevFri, 29 May 2026 00:00:00 GMTPalo Alto Networks · PAN-OS. In CISA KEV since 2026-05-29, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.0% (higher than 99.86% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1133 External Remote Services. Named in 4 threat reports. Priority 93.3 of 100.kevransomwarepublic-exploitT1190T1133https://patchfirst.co/cve/CVE-2025-66644/CVE-2025-66644#kevMon, 08 Dec 2025 00:00:00 GMTArray Networks · ArrayOS AG. In CISA KEV since 2025-12-08. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 88.9% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 67.6 of 100.kevT1133T1059https://patchfirst.co/cve/CVE-2025-20333/CVE-2025-20333#kevThu, 25 Sep 2025 00:00:00 GMTCisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. In CISA KEV since 2025-09-25. ENISA EUVD lists it as exploited. EPSS 71.2% (higher than 99.41% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Named in 5 threat reports. Priority 79.8 of 100.kevpublic-exploitT1133T1059https://patchfirst.co/cve/CVE-2023-39780/CVE-2023-39780#kevMon, 02 Jun 2025 00:00:00 GMTASUS · RT-AX55 Routers. In CISA KEV since 2025-06-02. ENISA EUVD lists it as exploited. EPSS 39.5% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services; T1588 Obtain Capabilities; T1059.004 Unix Shell; T1021.004 SSH. Priority 68.9 of 100.kevpublic-exploitT1078T1133T1588T1059.004T1021.004https://patchfirst.co/cve/CVE-2025-32756/CVE-2025-32756#kevWed, 14 May 2025 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2025-05-14. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1003 OS Credential Dumping; T1041 Exfiltration Over C2 Channel; T1046 Network Service Discovery; T1070.004 File Deletion; +1 more. Priority 79.5 of 100.kevpublic-exploitT1133T1059T1003T1041T1046T1070.004T1608.001https://patchfirst.co/cve/CVE-2024-11120/CVE-2024-11120#kevWed, 07 May 2025 00:00:00 GMTGeoVision · Multiple Devices. In CISA KEV since 2025-05-07. ENISA EUVD lists it as exploited. EPSS 28.4% (higher than 98.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1498 Network Denial of Service. Priority 69.5 of 100.kevpublic-exploitT1133T1498https://patchfirst.co/cve/CVE-2024-45195/CVE-2024-45195#kevTue, 04 Feb 2025 00:00:00 GMTApache · OFBiz. In CISA KEV since 2025-02-04. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1498.001 Direct Network Flood. Priority 68.2 of 100.kevpublic-exploitT1133T1059T1498.001https://patchfirst.co/cve/CVE-2023-48365/CVE-2023-48365#kevMon, 13 Jan 2025 00:00:00 GMTQlik · Sense. In CISA KEV since 2025-01-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 47.7% (higher than 98.8% of CVEs). CVSS 9.9 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.kevransomwareT1133T1190T1059https://patchfirst.co/cve/CVE-2024-1212/CVE-2024-1212#kevMon, 18 Nov 2024 00:00:00 GMTProgress · Kemp LoadMaster. In CISA KEV since 2024-11-18. ENISA EUVD lists it as exploited. EPSS 95.4% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1133T1059https://patchfirst.co/cve/CVE-2023-20269/CVE-2023-20269#kevWed, 13 Sep 2023 00:00:00 GMTCisco · Adaptive Security Appliance and Firepower Threat Defense. In CISA KEV since 2023-09-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 26.6% (higher than 98% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1133 External Remote Services; T1078 Valid Accounts. Priority 74.0 of 100.kevransomwareT1133T1078https://patchfirst.co/cve/CVE-2023-27532/CVE-2023-27532#kevTue, 22 Aug 2023 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2023-08-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS 80.6% (higher than 99.62% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059.003 Windows Command Shell; T1087 Account Discovery; T1087.001 Local Account; T1486 Data Encrypted for Impact; T1555 Credentials from Password Stores. Named in 1 threat report. Priority 82.0 of 100.kevransomwarepublic-exploitT1133T1059.003T1087T1087.001T1486T1555https://patchfirst.co/cve/CVE-2022-23176/CVE-2022-23176#kevMon, 11 Apr 2022 00:00:00 GMTWatchGuard · Firebox and XTM. In CISA KEV since 2022-04-11. ENISA EUVD lists it as exploited. EPSS 10.8% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1133 External Remote Services; T1078 Valid Accounts. Priority 63.3 of 100.kevT1133T1078https://patchfirst.co/cve/CVE-2022-20699/CVE-2022-20699#kevThu, 03 Mar 2022 00:00:00 GMTCisco · Small Business RV160, RV260, RV340, and RV345 Series Routers. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 72.5% (higher than 99.44% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059.004 Unix Shell. Priority 69.7 of 100.kevpublic-exploitT1133T1059.004https://patchfirst.co/cve/CVE-2014-6271/CVE-2014-6271#kevFri, 28 Jan 2022 00:00:00 GMTGNU · Bourne-Again Shell (Bash). In CISA KEV since 2022-01-28. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell. Named in 2 threat reports. Priority 76.0 of 100.kevpublic-exploitT1133T1190T1059.004https://patchfirst.co/cve/CVE-2014-7169/CVE-2014-7169#kevFri, 28 Jan 2022 00:00:00 GMTGNU · Bourne-Again Shell (Bash). In CISA KEV since 2022-01-28. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell. Priority 69.9 of 100.kevpublic-exploitT1133T1190T1059.004https://patchfirst.co/cve/CVE-2019-11510/CVE-2019-11510#kevWed, 03 Nov 2021 00:00:00 GMTIvanti · Pulse Connect Secure. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1083 File and Directory Discovery; T1552.001 Credentials In Files. Named in 6 threat reports. Priority 90.0 of 100.kevransomwarepublic-exploitT1133T1059T1083T1552.001https://patchfirst.co/cve/CVE-2019-19781/CVE-2019-19781#kevWed, 03 Nov 2021 00:00:00 GMTCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1083 File and Directory Discovery. Named in 8 threat reports. Priority 89.9 of 100.kevransomwarepublic-exploitT1133T1059T1083https://patchfirst.co/cve/CVE-2020-5902/CVE-2020-5902#kevWed, 03 Nov 2021 00:00:00 GMTF5 · BIG-IP. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1003 OS Credential Dumping; T1005 Data from Local System; T1070.004 File Deletion; +1 more. Named in 5 threat reports. Priority 89.9 of 100.kevransomwarepublic-exploitT1133T1190T1059T1003T1005T1070.004T1552https://patchfirst.co/cve/CVE-2021-26855/CVE-2021-26855#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Exchange Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1090 Proxy; T1005 Data from Local System; T1505.003 Web Shell. Named in 5 threat reports. Priority 89.4 of 100.kevransomwarepublic-exploitT1133T1090T1005T1505.003https://patchfirst.co/cve/CVE-2020-1472/CVE-2020-1472#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Netlogon. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1110 Brute Force; T1133 External Remote Services; T1021 Remote Services; T1068 Exploitation for Privilege Escalation; T1087.002 Domain Account; T1486 Data Encrypted for Impact. Named in 8 threat reports. Priority 86.8 of 100.kevransomwarepublic-exploitT1110T1133T1021T1068T1087.002T1486https://patchfirst.co/cve/CVE-2019-0708/CVE-2019-0708#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Remote Desktop Services. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1498 Network Denial of Service. Named in 2 threat reports. Priority 86.0 of 100.kevransomwarepublic-exploitT1133T1498https://patchfirst.co/cve/CVE-2019-3396/CVE-2019-3396#kevWed, 03 Nov 2021 00:00:00 GMTAtlassian · Confluence Server and Data Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1090 Proxy; T1202 Indirect Command Execution. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1133T1090T1202https://patchfirst.co/cve/CVE-2021-22986/CVE-2021-22986#kevWed, 03 Nov 2021 00:00:00 GMTF5 · BIG-IP and BIG-IQ Centralized Management. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1090 Proxy; T1485 Data Destruction. Priority 79.9 of 100.kevransomwarepublic-exploitT1133T1190T1059T1090T1485https://patchfirst.co/cve/CVE-2019-5591/CVE-2019-5591#kevWed, 03 Nov 2021 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 18.6% (higher than 97.3% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1557 Adversary-in-the-Middle; T1005 Data from Local System. Priority 77.0 of 100.kevransomwarepublic-exploitT1133T1557T1005https://patchfirst.co/cve/CVE-2020-25506/CVE-2020-25506#kevWed, 03 Nov 2021 00:00:00 GMTD-Link · DNS-320 Device. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1584.005 Botnet. Named in 1 threat report. Priority 73.7 of 100.kevpublic-exploitT1133T1059T1584.005https://patchfirst.co/cve/CVE-2020-8515/CVE-2020-8515#kevWed, 03 Nov 2021 00:00:00 GMTDrayTek · Multiple Vigor Routers. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1496 Resource Hijacking. Priority 69.9 of 100.kevpublic-exploitT1133T1059T1496https://patchfirst.co/cve/CVE-2021-1497/CVE-2021-1497#kevWed, 03 Nov 2021 00:00:00 GMTCisco · HyperFlex HX. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.kevpublic-exploitT1133T1059https://patchfirst.co/cve/CVE-2021-1498/CVE-2021-1498#kevWed, 03 Nov 2021 00:00:00 GMTCisco · HyperFlex HX. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.kevpublic-exploitT1133T1059https://patchfirst.co/cve/CVE-2018-4939/CVE-2018-4939#kevWed, 03 Nov 2021 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 61.8% (higher than 99.17% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application. Priority 64.7 of 100.kevT1133T1190https://patchfirst.co/cve/CVE-2020-15188/CVE-2020-15188Fri, 18 Sep 2020 00:00:00 GMTinunosinsi · soycms. Not in CISA KEV. EPSS 5.1% (higher than 92.3% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 25.5 of 100.T1133T1059https://patchfirst.co/cve/CVE-2020-15147/CVE-2020-15147Fri, 21 Aug 2020 00:00:00 GMTCog-Creators · Red-DiscordBot. Not in CISA KEV. EPSS 2.6% (higher than 85.4% of CVEs). CVSS 8.5 HIGH. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 23.0 of 100.T1133T1059https://patchfirst.co/cve/CVE-2020-15140/CVE-2020-15140Fri, 21 Aug 2020 00:00:00 GMTCog-Creators · Red-DiscordBot. Not in CISA KEV. EPSS 1.2% (higher than 67% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 19.1 of 100.T1133T1059https://patchfirst.co/cve/CVE-2020-15143/CVE-2020-15143Wed, 19 Aug 2020 00:00:00 GMTSylius · SyliusResourceBundle. Not in CISA KEV. EPSS 1.9% (higher than 79.8% of CVEs). CVSS 7.7 HIGH. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 21.4 of 100.T1133T1059https://patchfirst.co/cve/CVE-2020-15109/CVE-2020-15109Tue, 04 Aug 2020 00:00:00 GMTsolidusio · solidus. Not in CISA KEV. EPSS 1.0% (higher than 62.7% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 16.3 of 100.T1133T1190T1565https://patchfirst.co/cve/CVE-2020-12029/CVE-2020-12029Mon, 20 Jul 2020 00:00:00 GMTRockwell Automation · FactoryTalk View SE. Not in CISA KEV. EPSS 47.0% (higher than 98.8% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1505.003 Web Shell; T1059 Command and Scripting Interpreter. Priority 31.1 of 100.public-exploitT1133T1505.003T1059https://patchfirst.co/cve/CVE-2020-3387/CVE-2020-3387Thu, 16 Jul 2020 00:00:00 GMTCisco · Cisco SD-WAN vManage. Not in CISA KEV. EPSS 13.0% (higher than 96.3% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 29.5 of 100.public-exploitT1133T1190T1068https://patchfirst.co/cve/CVE-2020-4068/CVE-2020-4068Mon, 22 Jun 2020 00:00:00 GMTkylebrowning · APNSwift. Not in CISA KEV. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1091 Replication Through Removable Media; T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.6 of 100.T1091T1133T1190T1566T1499.004T1574https://patchfirst.co/cve/CVE-2020-12000/CVE-2020-12000Tue, 09 Jun 2020 00:00:00 GMTNot in CISA KEV. EPSS 1.5% (higher than 73.9% of CVEs). ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 14.8 of 100.T1133T1059https://patchfirst.co/cve/CVE-2020-3198/CVE-2020-3198Wed, 03 Jun 2020 00:00:00 GMTCisco · Cisco IOS 12.2(60)EZ16. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 25.2 of 100.T1133T1190T1566T1499.004T1574https://patchfirst.co/cve/CVE-2020-3237/CVE-2020-3237Wed, 03 Jun 2020 00:00:00 GMTCisco · Cisco IOx. Not in CISA KEV. EPSS 0.4% (higher than 28.6% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1133 External Remote Services; T1565.001 Stored Data Manipulation. Priority 10.1 of 100.T1133T1565.001https://patchfirst.co/cve/CVE-2020-3309/CVE-2020-3309Wed, 06 May 2020 00:00:00 GMTCisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 1.8% (higher than 78% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1565.001 Stored Data Manipulation. Priority 20.2 of 100.T1133T1190T1574T1565.001https://patchfirst.co/cve/CVE-2020-11010/CVE-2020-11010Mon, 20 Apr 2020 00:00:00 GMTtortoise · tortoise-orm. Not in CISA KEV. EPSS 1.0% (higher than 64.2% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1136 Create Account; T1190 Exploit Public-Facing Application; T1505.003 Web Shell; +1 more. Priority 17.2 of 100.T1133T1059T1005T1136T1190T1505.003T1565.001https://patchfirst.co/cve/CVE-2020-3240/CVE-2020-3240Wed, 15 Apr 2020 00:00:00 GMTCisco · Cisco UCS Director. Not in CISA KEV. EPSS 38.7% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1005 Data from Local System; T1505.003 Web Shell; T1003.008 /etc/passwd and /etc/shadow; T1059 Command and Scripting Interpreter; T1552.001 Credentials In Files. Priority 26.6 of 100.T1133T1005T1505.003T1003.008T1059T1552.001https://patchfirst.co/cve/CVE-2020-10603/CVE-2020-10603Thu, 09 Apr 2020 00:00:00 GMTNot in CISA KEV. EPSS 1.2% (higher than 68.7% of CVEs). ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 13.7 of 100.T1133T1059https://patchfirst.co/cve/CVE-2019-18234/CVE-2019-18234Mon, 23 Dec 2019 00:00:00 GMTNot in CISA KEV. EPSS 1.9% (higher than 79.5% of CVEs). ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1136 Create Account; T1190 Exploit Public-Facing Application; T1505.003 Web Shell; +1 more. Priority 15.9 of 100.T1133T1059T1005T1136T1190T1505.003T1565.001https://patchfirst.co/cve/CVE-2019-15972/CVE-2019-15972Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco Unified Communications Manager. Not in CISA KEV. EPSS 1.6% (higher than 75.8% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1565.001 Stored Data Manipulation. Priority 23.9 of 100.public-exploitT1078T1133T1059T1005T1565.001https://patchfirst.co/cve/CVE-2019-15288/CVE-2019-15288Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco TelePresence TC Software. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services; T1608 Stage Capabilities. Priority 21.7 of 100.T1078T1133T1608https://patchfirst.co/cve/CVE-2019-15998/CVE-2019-15998Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco IOS XR Software. Not in CISA KEV. EPSS 0.7% (higher than 54.1% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services. Priority 14.5 of 100.T1078T1133