{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1204.001 Malicious Link","home_page_url":"https://patchfirst.co/technique/T1204.001/","feed_url":"https://patchfirst.co/feed/technique/T1204.001.json","description":"New and newly exploited CVEs that lead to ATT&CK T1204.001 Malicious Link, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-96951#kev","url":"https://patchfirst.co/cve/CVE-2026-96951/","title":"[KEV] CVE-2026-96951: Microsoft Windows Command Injection Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.","summary":"Microsoft Windows Command Injection Vulnerability","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T16:20:22.000Z","tags":["kev","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":73.3,"kev":{"dateAdded":"2026-10-13","ransomware":false},"epss":{"score":0.09813,"percentile":0.95543},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2008-4128#kev","url":"https://patchfirst.co/cve/CVE-2008-4128/","title":"[KEV] CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability","content_text":"Cisco · IOS. In CISA KEV since 2026-07-13. ENISA EUVD lists it as exploited. EPSS 33.9% (higher than 98.4% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.","summary":"Cisco IOS Cross-Site Request Forgery Vulnerability","date_published":"2026-07-13T00:00:00.000Z","date_modified":"2026-09-24T12:52:19.000Z","tags":["kev","public-exploit","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":73.3,"kev":{"dateAdded":"2026-07-13","ransomware":false},"epss":{"score":0.33871,"percentile":0.98388},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-68461#kev","url":"https://patchfirst.co/cve/CVE-2025-68461/","title":"[KEV] CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2026-02-20. ENISA EUVD lists it as exploited. EPSS 27.4% (higher than 98.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 71.9 of 100.","summary":"RoundCube Webmail Cross-site Scripting Vulnerability","date_published":"2026-02-20T00:00:00.000Z","date_modified":"2026-06-17T09:59:06.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":71.9,"kev":{"dateAdded":"2026-02-20","ransomware":false},"epss":{"score":0.27407,"percentile":0.98064},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-6218#kev","url":"https://patchfirst.co/cve/CVE-2025-6218/","title":"[KEV] CVE-2025-6218: RARLAB WinRAR Path Traversal Vulnerability","content_text":"RARLAB · WinRAR. In CISA KEV since 2025-12-09. ENISA EUVD lists it as exploited. EPSS 90.5% (higher than 99.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link. Priority 68.4 of 100.","summary":"RARLAB WinRAR Path Traversal Vulnerability","date_published":"2025-12-09T00:00:00.000Z","date_modified":"2026-06-17T10:01:24.000Z","tags":["kev","public-exploit","T1204.001"],"_patchfirst":{"reason":"kev","priority":68.4,"kev":{"dateAdded":"2025-12-09","ransomware":false},"epss":{"score":0.90479,"percentile":0.998},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0"},"vendor":"RARLAB","product":"WinRAR","techniqueIds":["T1204.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-11023#kev","url":"https://patchfirst.co/cve/CVE-2020-11023/","title":"[KEV] CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability","content_text":"JQuery · JQuery. In CISA KEV since 2025-01-23. ENISA EUVD lists it as exploited. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 67.2 of 100.","summary":"JQuery Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-01-23T00:00:00.000Z","date_modified":"2026-06-17T02:48:52.000Z","tags":["kev","public-exploit","T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2025-01-23","ransomware":false},"epss":{"score":0.84887,"percentile":0.99711},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"JQuery","product":"JQuery","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-2120#kev","url":"https://patchfirst.co/cve/CVE-2014-2120/","title":"[KEV] CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","content_text":"Cisco · Adaptive Security Appliance (ASA). In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS 22.6% (higher than 97.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 61.8 of 100.","summary":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-11-12T00:00:00.000Z","date_modified":"2026-06-17T00:06:05.000Z","tags":["kev","T1204.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":61.8,"kev":{"dateAdded":"2024-11-12","ransomware":false},"epss":{"score":0.22558,"percentile":0.97711},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Adaptive Security Appliance (ASA)","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-37383#kev","url":"https://patchfirst.co/cve/CVE-2024-37383/","title":"[KEV] CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2024-10-24. ENISA EUVD lists it as exploited. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.2 of 100.","summary":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-10-24T00:00:00.000Z","date_modified":"2026-06-17T07:38:15.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2024-10-24","ransomware":false},"epss":{"score":0.73995,"percentile":0.9948},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-43461#kev","url":"https://patchfirst.co/cve/CVE-2024-43461/","title":"[KEV] CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-09-16. ENISA EUVD lists it as exploited. EPSS 54.5% (higher than 99.01% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link. Priority 64.0 of 100.","summary":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","date_published":"2024-09-16T00:00:00.000Z","date_modified":"2026-08-10T16:19:10.000Z","tags":["kev","T1204.001"],"_patchfirst":{"reason":"kev","priority":64,"kev":{"dateAdded":"2024-09-16","ransomware":false},"epss":{"score":0.54486,"percentile":0.99013},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-38112#kev","url":"https://patchfirst.co/cve/CVE-2024-38112/","title":"[KEV] CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-07-09. ENISA EUVD lists it as exploited. EPSS 84.2% (higher than 99.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.001 Malicious Link. Priority 68.2 of 100.","summary":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","date_published":"2024-07-09T00:00:00.000Z","date_modified":"2026-06-17T07:39:26.000Z","tags":["kev","public-exploit","T1189","T1204.001"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2024-07-09","ransomware":false},"epss":{"score":0.84225,"percentile":0.99696},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1204.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-100005#kev","url":"https://patchfirst.co/cve/CVE-2014-100005/","title":"[KEV] CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","content_text":"D-Link · DIR-600 Router. In CISA KEV since 2024-05-16. ENISA EUVD lists it as exploited. EPSS 43.5% (higher than 98.7% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter; T1098 Account Manipulation. Priority 68.3 of 100.","summary":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","date_published":"2024-05-16T00:00:00.000Z","date_modified":"2026-06-17T00:04:00.000Z","tags":["kev","public-exploit","T1204.001","T1059","T1098"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-05-16","ransomware":false},"epss":{"score":0.43456,"percentile":0.98737},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"D-Link","product":"DIR-600 Router","techniqueIds":["T1204.001","T1059","T1098"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-30040#kev","url":"https://patchfirst.co/cve/CVE-2024-30040/","title":"[KEV] CVE-2024-30040: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-05-14. ENISA EUVD lists it as exploited. EPSS 3.9% (higher than 90.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 62.2 of 100.","summary":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","date_published":"2024-05-14T00:00:00.000Z","date_modified":"2026-06-17T07:26:06.000Z","tags":["kev","T1204.001","T1211"],"_patchfirst":{"reason":"kev","priority":62.2,"kev":{"dateAdded":"2024-05-14","ransomware":false},"epss":{"score":0.03939,"percentile":0.90377},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-21412#kev","url":"https://patchfirst.co/cve/CVE-2024-21412/","title":"[KEV] CVE-2024-21412: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-02-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Named in 1 threat report. Priority 82.5 of 100.","summary":"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","date_published":"2024-02-13T00:00:00.000Z","date_modified":"2026-08-10T16:18:51.000Z","tags":["kev","ransomware","public-exploit","T1204.001","T1553.005"],"_patchfirst":{"reason":"kev","priority":82.5,"kev":{"dateAdded":"2024-02-13","ransomware":true},"epss":{"score":0.9941,"percentile":0.99941},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1553.005"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36584#kev","url":"https://patchfirst.co/cve/CVE-2023-36584/","title":"[KEV] CVE-2023-36584: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2023-11-16. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.3% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Priority 59.4 of 100.","summary":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","date_published":"2023-11-16T00:00:00.000Z","date_modified":"2026-06-17T06:06:36.000Z","tags":["kev","T1204.001","T1553.005"],"_patchfirst":{"reason":"kev","priority":59.4,"kev":{"dateAdded":"2023-11-16","ransomware":false},"epss":{"score":0.03251,"percentile":0.8832},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1553.005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-36025#kev","url":"https://patchfirst.co/cve/CVE-2023-36025/","title":"[KEV] CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2023-11-14. ENISA EUVD lists it as exploited. EPSS 88.1% (higher than 99.77% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 79.1 of 100.","summary":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","date_published":"2023-11-14T00:00:00.000Z","date_modified":"2026-06-17T06:05:41.000Z","tags":["kev","public-exploit","T1204.001","T1211"],"_patchfirst":{"reason":"kev","priority":79.1,"kev":{"dateAdded":"2023-11-14","ransomware":false},"epss":{"score":0.88085,"percentile":0.99765},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-5631#kev","url":"https://patchfirst.co/cve/CVE-2023-5631/","title":"[KEV] CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2023-10-26. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1041 Exfiltration Over C2 Channel. Priority 66.7 of 100.","summary":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-10-26T00:00:00.000Z","date_modified":"2026-06-17T06:48:58.000Z","tags":["kev","public-exploit","T1204.001","T1059.007","T1041"],"_patchfirst":{"reason":"kev","priority":66.7,"kev":{"dateAdded":"2023-10-26","ransomware":false},"epss":{"score":0.76337,"percentile":0.99538},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1204.001","T1059.007","T1041"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-5217#kev","url":"https://patchfirst.co/cve/CVE-2023-5217/","title":"[KEV] CVE-2023-5217: Google Chromium libvpx Heap Buffer Overflow Vulnerability","content_text":"Google · Chromium libvpx. In CISA KEV since 2023-10-02. ENISA EUVD lists it as exploited. EPSS 49.0% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.9 of 100.","summary":"Google Chromium libvpx Heap Buffer Overflow Vulnerability","date_published":"2023-10-02T00:00:00.000Z","date_modified":"2026-06-17T06:48:06.000Z","tags":["kev","public-exploit","T1204.001","T1574"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2023-10-02","ransomware":false},"epss":{"score":0.49013,"percentile":0.98879},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium libvpx","techniqueIds":["T1204.001","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41061#kev","url":"https://patchfirst.co/cve/CVE-2023-41061/","title":"[KEV] CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","content_text":"Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2023-09-11. ENISA EUVD lists it as exploited. EPSS 4.4% (higher than 91.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 61.7 of 100.","summary":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","date_published":"2023-09-11T00:00:00.000Z","date_modified":"2026-06-17T06:20:21.000Z","tags":["kev","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":61.7,"kev":{"dateAdded":"2023-09-11","ransomware":false},"epss":{"score":0.04409,"percentile":0.91322},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS, iPadOS, and watchOS","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-37580","url":"https://patchfirst.co/cve/CVE-2023-37580/","title":"CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-07-27. ENISA EUVD lists it as exploited. EPSS 49.1% (higher than 98.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.0 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2023-07-31T00:00:00.000Z","date_modified":"2026-06-17T06:08:30.000Z","tags":["kev","public-exploit","T1204.001","T1059.007"],"_patchfirst":{"reason":"published","priority":67,"kev":{"dateAdded":"2023-07-27","ransomware":false},"epss":{"score":0.49083,"percentile":0.98882},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1204.001","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-35311#kev","url":"https://patchfirst.co/cve/CVE-2023-35311/","title":"[KEV] CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability","content_text":"Microsoft · Outlook. In CISA KEV since 2023-07-11. ENISA EUVD lists it as exploited. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 63.5 of 100.","summary":"Microsoft Outlook Security Feature Bypass Vulnerability","date_published":"2023-07-11T00:00:00.000Z","date_modified":"2026-10-08T10:35:03.000Z","tags":["kev","T1204.001","T1211"],"_patchfirst":{"reason":"kev","priority":63.5,"kev":{"dateAdded":"2023-07-11","ransomware":false},"epss":{"score":0.15522,"percentile":0.96809},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Outlook","techniqueIds":["T1204.001","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32046#kev","url":"https://patchfirst.co/cve/CVE-2023-32046/","title":"[KEV] CVE-2023-32046: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2023-07-11. ENISA EUVD lists it as exploited. EPSS 10.0% (higher than 95.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1068 Exploitation for Privilege Escalation. Priority 62.6 of 100.","summary":"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","date_published":"2023-07-11T00:00:00.000Z","date_modified":"2026-06-17T05:57:57.000Z","tags":["kev","T1204.001","T1068"],"_patchfirst":{"reason":"kev","priority":62.6,"kev":{"dateAdded":"2023-07-11","ransomware":false},"epss":{"score":0.09969,"percentile":0.95593},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-2136#kev","url":"https://patchfirst.co/cve/CVE-2023-2136/","title":"[KEV] CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerability","content_text":"Google · Chromium Skia. In CISA KEV since 2023-04-21. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.1% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1204.001 Malicious Link. Priority 63.3 of 100.","summary":"Google Chrome Skia Integer Overflow Vulnerability","date_published":"2023-04-21T00:00:00.000Z","date_modified":"2026-06-17T05:51:32.000Z","tags":["kev","T1204.001"],"_patchfirst":{"reason":"kev","priority":63.3,"kev":{"dateAdded":"2023-04-21","ransomware":false},"epss":{"score":0.05786,"percentile":0.93089},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium Skia","techniqueIds":["T1204.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-3038#kev","url":"https://patchfirst.co/cve/CVE-2022-3038/","title":"[KEV] CVE-2022-3038: Google Chromium Network Service Use-After-Free Vulnerability","content_text":"Google · Chromium Network Service. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 24.9% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.7 of 100.","summary":"Google Chromium Network Service Use-After-Free Vulnerability","date_published":"2023-03-30T00:00:00.000Z","date_modified":"2026-06-17T04:58:41.000Z","tags":["kev","public-exploit","T1204.001","T1574"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2023-03-30","ransomware":false},"epss":{"score":0.24925,"percentile":0.97911},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium Network Service","techniqueIds":["T1204.001","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-24880#kev","url":"https://patchfirst.co/cve/CVE-2023-24880/","title":"[KEV] CVE-2023-24880: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2023-03-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 78.0% (higher than 99.57% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Priority 71.0 of 100.","summary":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","date_published":"2023-03-14T00:00:00.000Z","date_modified":"2026-06-17T05:40:10.000Z","tags":["kev","ransomware","T1204.001","T1553.005"],"_patchfirst":{"reason":"kev","priority":71,"kev":{"dateAdded":"2023-03-14","ransomware":true},"epss":{"score":0.78005,"percentile":0.99574},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1553.005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-41049#kev","url":"https://patchfirst.co/cve/CVE-2022-41049/","title":"[KEV] CVE-2022-41049: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-11-14. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85.5% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Priority 58.9 of 100.","summary":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","date_published":"2022-11-14T00:00:00.000Z","date_modified":"2026-08-10T16:18:15.000Z","tags":["kev","T1204.001","T1553.005"],"_patchfirst":{"reason":"kev","priority":58.9,"kev":{"dateAdded":"2022-11-14","ransomware":false},"epss":{"score":0.02634,"percentile":0.85525},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1553.005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-3075","url":"https://patchfirst.co/cve/CVE-2022-3075/","title":"CVE-2022-3075: Google Chromium Mojo Insufficient Data Validation Vulnerability","content_text":"Google · Chromium Mojo. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.2% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1204.001 Malicious Link. Priority 63.4 of 100.","summary":"Google Chromium Mojo Insufficient Data Validation Vulnerability","date_published":"2022-09-26T00:00:00.000Z","date_modified":"2026-06-17T04:58:46.000Z","tags":["kev","T1204.001"],"_patchfirst":{"reason":"published","priority":63.4,"kev":{"dateAdded":"2022-09-08","ransomware":false},"epss":{"score":0.05846,"percentile":0.93166},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium Mojo","techniqueIds":["T1204.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2010-2568#kev","url":"https://patchfirst.co/cve/CVE-2010-2568/","title":"[KEV] CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 89.6% (higher than 99.79% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Named in 4 threat reports. Priority 77.4 of 100.","summary":"Microsoft Windows Remote Code Execution Vulnerability","date_published":"2022-09-15T00:00:00.000Z","date_modified":"2026-06-16T23:20:59.000Z","tags":["kev","public-exploit","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":77.4,"kev":{"dateAdded":"2022-09-15","ransomware":false},"epss":{"score":0.89623,"percentile":0.99787},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1059"],"reportCount":4,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-21971#kev","url":"https://patchfirst.co/cve/CVE-2022-21971/","title":"[KEV] CVE-2022-21971: Microsoft Windows Runtime Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-08-18. ENISA EUVD lists it as exploited. EPSS 53.8% (higher than 99% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.","summary":"Microsoft Windows Runtime Remote Code Execution Vulnerability","date_published":"2022-08-18T00:00:00.000Z","date_modified":"2026-06-17T04:27:22.000Z","tags":["kev","public-exploit","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2022-08-18","ransomware":false},"epss":{"score":0.53781,"percentile":0.98997},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2012-0767#kev","url":"https://patchfirst.co/cve/CVE-2012-0767/","title":"[KEV] CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","content_text":"Adobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1185 Browser Session Hijacking; T1098 Account Manipulation; T1114.002 Remote Email Collection. Priority 46.0 of 100.","summary":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-16T23:38:13.000Z","tags":["kev","T1204.001","T1185","T1098","T1114.002"],"_patchfirst":{"reason":"kev","priority":46,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.06187,"percentile":0.93491},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1204.001","T1185","T1098","T1114.002"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-18426#kev","url":"https://patchfirst.co/cve/CVE-2019-18426/","title":"[KEV] CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability","content_text":"Meta Platforms · WhatsApp. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 67.9% (higher than 99.32% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1005 Data from Local System; T1059.007 JavaScript. Priority 78.6 of 100.","summary":"WhatsApp Cross-Site Scripting Vulnerability","date_published":"2022-05-23T00:00:00.000Z","date_modified":"2026-06-17T02:25:01.000Z","tags":["kev","public-exploit","T1204.001","T1005","T1059.007"],"_patchfirst":{"reason":"kev","priority":78.6,"kev":{"dateAdded":"2022-05-23","ransomware":false},"epss":{"score":0.67859,"percentile":0.99318},"cvss":{"score":8.2,"severity":"HIGH","version":"3.1"},"vendor":"Meta Platforms","product":"WhatsApp","techniqueIds":["T1204.001","T1005","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-8414#kev","url":"https://patchfirst.co/cve/CVE-2018-8414/","title":"[KEV] CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 72.6% (higher than 99.44% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.","summary":"Microsoft Windows Shell Remote Code Execution Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T02:04:48.000Z","tags":["kev","public-exploit","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":69,"kev":{"dateAdded":"2022-03-25","ransomware":false},"epss":{"score":0.72621,"percentile":0.99442},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-24682#kev","url":"https://patchfirst.co/cve/CVE-2022-24682/","title":"[KEV] CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.","summary":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","date_published":"2022-02-25T00:00:00.000Z","date_modified":"2026-08-07T05:16:55.000Z","tags":["kev","ransomware","public-exploit","T1204.001","T1059.007","T1185"],"_patchfirst":{"reason":"kev","priority":76.9,"kev":{"dateAdded":"2022-02-25","ransomware":true},"epss":{"score":0.30931,"percentile":0.98256},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaborate Suite (ZCS)","techniqueIds":["T1204.001","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-8464#kev","url":"https://patchfirst.co/cve/CVE-2017-8464/","title":"[KEV] CVE-2017-8464: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-02-10. ENISA EUVD lists it as exploited. EPSS 90.0% (higher than 99.79% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1203 Exploitation for Client Execution. Priority 69.1 of 100.","summary":"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","date_published":"2022-02-10T00:00:00.000Z","date_modified":"2026-06-17T01:26:24.000Z","tags":["kev","public-exploit","T1204.001","T1203"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2022-02-10","ransomware":false},"epss":{"score":0.90026,"percentile":0.99793},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-38000","url":"https://patchfirst.co/cve/CVE-2021-38000/","title":"CVE-2021-38000: Google Chromium Intents Improper Input Validation Vulnerability","content_text":"Google · Chromium Intents. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.2% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.001 Malicious Link. Priority 65.7 of 100.","summary":"Google Chromium Intents Improper Input Validation Vulnerability","date_published":"2021-11-23T00:00:00.000Z","date_modified":"2026-06-17T04:01:23.000Z","tags":["kev","public-exploit","T1189","T1204.001"],"_patchfirst":{"reason":"published","priority":65.7,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.04948,"percentile":0.9215},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Google","product":"Chromium Intents","techniqueIds":["T1189","T1204.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-3580#kev","url":"https://patchfirst.co/cve/CVE-2020-3580/","title":"[KEV] CVE-2020-3580: Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","content_text":"Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.6% (higher than 99.72% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter; T1217 Browser Information Discovery. Priority 77.2 of 100.","summary":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-08-11T19:42:47.000Z","tags":["kev","ransomware","public-exploit","T1204.001","T1059","T1217"],"_patchfirst":{"reason":"kev","priority":77.2,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.85575,"percentile":0.99724},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","techniqueIds":["T1204.001","T1059","T1217"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-0541#kev","url":"https://patchfirst.co/cve/CVE-2019-0541/","title":"[KEV] CVE-2019-0541: Microsoft MSHTML Remote Code Execution Vulnerability","content_text":"Microsoft · MSHTML. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 53.2% (higher than 99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.","summary":"Microsoft MSHTML Remote Code Execution Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:08:19.000Z","tags":["kev","public-exploit","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":69,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.53202,"percentile":0.98981},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"MSHTML","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2016-0185#kev","url":"https://patchfirst.co/cve/CVE-2016-0185/","title":"[KEV] CVE-2016-0185: Microsoft Windows Media Center Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 69.8% (higher than 99.37% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1203 Exploitation for Client Execution. Priority 68.3 of 100.","summary":"Microsoft Windows Media Center Remote Code Execution Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T00:37:04.000Z","tags":["kev","public-exploit","T1204.001","T1203"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.69846,"percentile":0.99369},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-9818#kev","url":"https://patchfirst.co/cve/CVE-2020-9818/","title":"[KEV] CVE-2020-9818: Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","content_text":"Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.6% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1499.004 Application or System Exploitation. Priority 60.9 of 100.","summary":"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:28:37.000Z","tags":["kev","T1204.001","T1499.004"],"_patchfirst":{"reason":"kev","priority":60.9,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.02344,"percentile":0.83629},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS, iPadOS, and watchOS","techniqueIds":["T1204.001","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-9819#kev","url":"https://patchfirst.co/cve/CVE-2020-9819/","title":"[KEV] CVE-2020-9819: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","content_text":"Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.7% of CVEs). CVSS 4.3 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 57.6 of 100.","summary":"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:28:37.000Z","tags":["kev","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":57.6,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.02232,"percentile":0.82748},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"iOS, iPadOS, and watchOS","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-16009","url":"https://patchfirst.co/cve/CVE-2019-16009/","title":"CVE-2019-16009: Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability","content_text":"Cisco · Cisco IOS 12.2(15)B. Not in CISA KEV. EPSS 1.0% (higher than 62% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 19.9 of 100.","summary":"Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability","date_published":"2020-09-23T00:00:00.000Z","date_modified":"2024-11-13T18:04:10.000Z","tags":["T1204.001","T1608"],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.00975,"percentile":0.62045},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco IOS 12.2(15)B","techniqueIds":["T1204.001","T1608"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3137","url":"https://patchfirst.co/cve/CVE-2020-3137/","title":"CVE-2020-3137: Cisco Email Security Appliance Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 0.8% (higher than 57.8% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.8 of 100.","summary":"Cisco Email Security Appliance Cross-Site Scripting Vulnerability","date_published":"2020-09-23T00:00:00.000Z","date_modified":"2024-11-13T18:06:49.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.8,"kev":null,"epss":{"score":0.0084,"percentile":0.57838},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Email Security Appliance (ESA)","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15182","url":"https://patchfirst.co/cve/CVE-2020-15182/","title":"CVE-2020-15182: Cross-site Request Forgery leading to RCE in SOY CMS","content_text":"inunosinsi · soycms. Not in CISA KEV. EPSS 1.2% (higher than 67.4% of CVEs). CVSS 8.4 HIGH. ATT&CK: T1204.001 Malicious Link; T1068 Exploitation for Privilege Escalation. Priority 19.4 of 100.","summary":"Cross-site Request Forgery leading to RCE in SOY CMS","date_published":"2020-09-17T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1204.001","T1068"],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.01171,"percentile":0.67408},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"inunosinsi","product":"soycms","techniqueIds":["T1204.001","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3349","url":"https://patchfirst.co/cve/CVE-2020-3349/","title":"CVE-2020-3349: Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.3 of 100.","summary":"Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities","date_published":"2020-07-16T00:00:00.000Z","date_modified":"2024-11-15T16:54:36.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.3,"kev":null,"epss":{"score":0.00622,"percentile":0.49814},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3356","url":"https://patchfirst.co/cve/CVE-2020-3356/","title":"CVE-2020-3356: Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.6 of 100.","summary":"Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability","date_published":"2020-06-18T00:00:00.000Z","date_modified":"2024-11-15T17:05:48.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.00801,"percentile":0.56584},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11082","url":"https://patchfirst.co/cve/CVE-2020-11082/","title":"CVE-2020-11082: Cross-Site Scripting in Kaminari","content_text":"kaminari · Kaminari. Not in CISA KEV. EPSS 1.5% (higher than 75% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.5 of 100.","summary":"Cross-Site Scripting in Kaminari","date_published":"2020-05-28T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.01546,"percentile":0.74963},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"kaminari","product":"Kaminari","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-12038","url":"https://patchfirst.co/cve/CVE-2020-12038/","title":"CVE-2020-12038: Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx…","content_text":"Not in CISA KEV. EPSS 2.6% (higher than 85.1% of CVEs). ATT&CK: T1204.001 Malicious Link; T1499.004 Application or System Exploitation. Priority 17.0 of 100.","summary":"Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx…","date_published":"2020-05-19T00:00:00.000Z","date_modified":"2024-08-04T11:48:58.000Z","tags":["T1204.001","T1499.004"],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.02562,"percentile":0.85087},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1204.001","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5336","url":"https://patchfirst.co/cve/CVE-2020-5336/","title":"CVE-2020-5336: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","content_text":"Dell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.","summary":"RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","date_published":"2020-05-04T00:00:00.000Z","date_modified":"2024-09-17T03:14:04.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00705,"percentile":0.53336},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"RSA Archer","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5269","url":"https://patchfirst.co/cve/CVE-2020-5269/","title":"CVE-2020-5269: Reflected XSS on AdminFeatures page of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.","summary":"Reflected XSS on AdminFeatures page of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00809,"percentile":0.56848},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5271","url":"https://patchfirst.co/cve/CVE-2020-5271/","title":"CVE-2020-5271: Reflected XSS with dashboard calendar of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.","summary":"Reflected XSS with dashboard calendar of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00809,"percentile":0.56848},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5264","url":"https://patchfirst.co/cve/CVE-2020-5264/","title":"CVE-2020-5264: Reflected XSS in security compromised page of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 55.1% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.1 of 100.","summary":"Reflected XSS in security compromised page of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00755,"percentile":0.55097},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3121","url":"https://patchfirst.co/cve/CVE-2020-3121/","title":"CVE-2020-3121: Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco 550X Series Stackable Managed Switches. Not in CISA KEV. EPSS 1.1% (higher than 64.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.","summary":"Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability","date_published":"2020-01-26T00:00:00.000Z","date_modified":"2024-11-15T17:45:38.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.01066,"percentile":0.64723},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco 550X Series Stackable Managed Switches","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}