{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1557 Adversary-in-the-Middle","home_page_url":"https://patchfirst.co/technique/T1557/","feed_url":"https://patchfirst.co/feed/technique/T1557.json","description":"New and newly exploited CVEs that lead to ATT&CK T1557 Adversary-in-the-Middle, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-34486#kev","url":"https://patchfirst.co/cve/CVE-2026-34486/","title":"[KEV] CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","content_text":"Apache · Tomcat. In CISA KEV since 2026-08-04. ENISA EUVD lists it as exploited. EPSS 98.5% (higher than 99.92% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1040 Network Sniffing; T1557 Adversary-in-the-Middle. Priority 73.2 of 100.","summary":"Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","date_published":"2026-08-04T00:00:00.000Z","date_modified":"2026-10-26T22:10:00.000Z","tags":["kev","public-exploit","T1040","T1557"],"_patchfirst":{"reason":"kev","priority":73.2,"kev":{"dateAdded":"2026-08-04","ransomware":false},"epss":{"score":0.98503,"percentile":0.9992},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Apache","product":"Tomcat","techniqueIds":["T1040","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-3502#kev","url":"https://patchfirst.co/cve/CVE-2026-3502/","title":"[KEV] CVE-2026-3502: TrueConf Client Download of Code Without Integrity Check Vulnerability","content_text":"TrueConf · Client. In CISA KEV since 2026-04-02. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1557 Adversary-in-the-Middle; T1059 Command and Scripting Interpreter. Priority 72.1 of 100.","summary":"TrueConf Client Download of Code Without Integrity Check Vulnerability","date_published":"2026-04-02T00:00:00.000Z","date_modified":"2026-06-17T10:43:41.000Z","tags":["kev","public-exploit","T1557","T1059"],"_patchfirst":{"reason":"kev","priority":72.1,"kev":{"dateAdded":"2026-04-02","ransomware":false},"epss":{"score":0.05845,"percentile":0.93164},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"TrueConf","product":"Client","techniqueIds":["T1557","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-15556#kev","url":"https://patchfirst.co/cve/CVE-2025-15556/","title":"[KEV] CVE-2025-15556: Notepad++ Download of Code Without Integrity Check Vulnerability","content_text":"Notepad++ · Notepad++. In CISA KEV since 2026-02-12. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.8% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1557 Adversary-in-the-Middle; T1204.002 Malicious File. Priority 68.8 of 100.","summary":"Notepad++ Download of Code Without Integrity Check Vulnerability","date_published":"2026-02-12T00:00:00.000Z","date_modified":"2026-06-17T08:38:01.000Z","tags":["kev","public-exploit","T1557","T1204.002"],"_patchfirst":{"reason":"kev","priority":68.8,"kev":{"dateAdded":"2026-02-12","ransomware":false},"epss":{"score":0.01746,"percentile":0.77785},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Notepad++","product":"Notepad++","techniqueIds":["T1557","T1204.002"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-31200#kev","url":"https://patchfirst.co/cve/CVE-2025-31200/","title":"[KEV] CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 20.9% (higher than 97.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.4 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2025-04-17T00:00:00.000Z","date_modified":"2026-06-17T09:10:00.000Z","tags":["kev","public-exploit","T1105","T1001","T1059","T1106","T1557"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2025-04-17","ransomware":false},"epss":{"score":0.20898,"percentile":0.97554},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1105","T1001","T1059","T1106","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-31201#kev","url":"https://patchfirst.co/cve/CVE-2025-31201/","title":"[KEV] CVE-2025-31201: Apple Multiple Products Arbitrary Read and Write Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 14.0% (higher than 96.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.2 of 100.","summary":"Apple Multiple Products Arbitrary Read and Write Vulnerability","date_published":"2025-04-17T00:00:00.000Z","date_modified":"2026-06-17T09:10:00.000Z","tags":["kev","public-exploit","T1105","T1001","T1059","T1106","T1557"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2025-04-17","ransomware":false},"epss":{"score":0.13973,"percentile":0.96545},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1105","T1001","T1059","T1106","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-11023#kev","url":"https://patchfirst.co/cve/CVE-2020-11023/","title":"[KEV] CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability","content_text":"JQuery · JQuery. In CISA KEV since 2025-01-23. ENISA EUVD lists it as exploited. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 67.2 of 100.","summary":"JQuery Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-01-23T00:00:00.000Z","date_modified":"2026-06-17T02:48:52.000Z","tags":["kev","public-exploit","T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2025-01-23","ransomware":false},"epss":{"score":0.84887,"percentile":0.99711},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"JQuery","product":"JQuery","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-48795","url":"https://patchfirst.co/cve/CVE-2023-48795/","title":"CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows…","content_text":"Not in CISA KEV. EPSS 93.5% (higher than 99.84% of CVEs). CVSS 5.9 MEDIUM. Public exploit code exists. ATT&CK: T1557 Adversary-in-the-Middle. Named in 1 threat report. Priority 70.8 of 100.","summary":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows…","date_published":"2023-12-18T00:00:00.000Z","date_modified":"2026-10-15T00:08:53.000Z","tags":["public-exploit","T1557"],"_patchfirst":{"reason":"published","priority":70.8,"kev":null,"epss":{"score":0.93547,"percentile":0.9984},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1"},"vendor":null,"product":null,"techniqueIds":["T1557"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-37436","url":"https://patchfirst.co/cve/CVE-2022-37436/","title":"CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting","content_text":"Apache Software Foundation · Apache HTTP Server. Not in CISA KEV. EPSS 55.9% (higher than 99.04% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1557 Adversary-in-the-Middle. Named in 1 threat report. Priority 28.1 of 100.","summary":"Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting","date_published":"2023-01-17T00:00:00.000Z","date_modified":"2025-04-04T18:06:37.000Z","tags":["T1190","T1557"],"_patchfirst":{"reason":"published","priority":28.1,"kev":null,"epss":{"score":0.55911,"percentile":0.99044},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Apache Software Foundation","product":"Apache HTTP Server","techniqueIds":["T1190","T1557"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-22536#kev","url":"https://patchfirst.co/cve/CVE-2022-22536/","title":"[KEV] CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability","content_text":"SAP · Multiple Products. In CISA KEV since 2022-08-18. ENISA EUVD lists it as exploited. EPSS 97.9% (higher than 99.91% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1557 Adversary-in-the-Middle. Priority 70.0 of 100.","summary":"SAP Multiple Products HTTP Request Smuggling Vulnerability","date_published":"2022-08-18T00:00:00.000Z","date_modified":"2026-06-17T04:28:33.000Z","tags":["kev","public-exploit","T1190","T1557"],"_patchfirst":{"reason":"kev","priority":70,"kev":{"dateAdded":"2022-08-18","ransomware":false},"epss":{"score":0.97945,"percentile":0.99909},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"SAP","product":"Multiple Products","techniqueIds":["T1190","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-26925#kev","url":"https://patchfirst.co/cve/CVE-2022-26925/","title":"[KEV] CVE-2022-26925: Microsoft Windows LSA Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-07-01. ENISA EUVD lists it as exploited. EPSS 10.5% (higher than 95.7% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1557 Adversary-in-the-Middle. Priority 71.3 of 100.","summary":"Microsoft Windows LSA Spoofing Vulnerability","date_published":"2022-07-01T00:00:00.000Z","date_modified":"2026-06-17T04:36:08.000Z","tags":["kev","T1190","T1557"],"_patchfirst":{"reason":"kev","priority":71.3,"kev":{"dateAdded":"2022-07-01","ransomware":false},"epss":{"score":0.10476,"percentile":0.95747},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1190","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-1040#kev","url":"https://patchfirst.co/cve/CVE-2022-1040/","title":"[KEV] CVE-2022-1040: Sophos Firewall Authentication Bypass Vulnerability","content_text":"Sophos · Firewall. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 79.9 of 100.","summary":"Sophos Firewall Authentication Bypass Vulnerability","date_published":"2022-03-31T00:00:00.000Z","date_modified":"2026-06-17T04:21:42.000Z","tags":["kev","public-exploit","T1190","T1059","T1040","T1078","T1557","T1574"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2022-03-31","ransomware":false},"epss":{"score":0.99796,"percentile":0.99957},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Sophos","product":"Firewall","techniqueIds":["T1190","T1059","T1040","T1078","T1557","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-36942#kev","url":"https://patchfirst.co/cve/CVE-2021-36942/","title":"[KEV] CVE-2021-36942: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 66.0% (higher than 99.27% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1557 Adversary-in-the-Middle. Priority 78.1 of 100.","summary":"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-08-10T20:19:03.000Z","tags":["kev","ransomware","public-exploit","T1190","T1557"],"_patchfirst":{"reason":"kev","priority":78.1,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.66023,"percentile":0.99272},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1190","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-5591#kev","url":"https://patchfirst.co/cve/CVE-2019-5591/","title":"[KEV] CVE-2019-5591: Fortinet FortiOS Default Configuration Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 18.6% (higher than 97.3% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1557 Adversary-in-the-Middle; T1005 Data from Local System. Priority 77.0 of 100.","summary":"Fortinet FortiOS Default Configuration Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-08-15T04:17:41.000Z","tags":["kev","ransomware","public-exploit","T1133","T1557","T1005"],"_patchfirst":{"reason":"kev","priority":77,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.18566,"percentile":0.9725},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1133","T1557","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-3137","url":"https://patchfirst.co/cve/CVE-2020-3137/","title":"CVE-2020-3137: Cisco Email Security Appliance Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 0.8% (higher than 57.8% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.8 of 100.","summary":"Cisco Email Security Appliance Cross-Site Scripting Vulnerability","date_published":"2020-09-23T00:00:00.000Z","date_modified":"2024-11-13T18:06:49.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.8,"kev":null,"epss":{"score":0.0084,"percentile":0.57838},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Email Security Appliance (ESA)","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3349","url":"https://patchfirst.co/cve/CVE-2020-3349/","title":"CVE-2020-3349: Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.3 of 100.","summary":"Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities","date_published":"2020-07-16T00:00:00.000Z","date_modified":"2024-11-15T16:54:36.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.3,"kev":null,"epss":{"score":0.00622,"percentile":0.49814},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15093","url":"https://patchfirst.co/cve/CVE-2020-15093/","title":"CVE-2020-15093: Improper verification of signature threshold in tough","content_text":"awslabs · tough. Not in CISA KEV. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 20.3 of 100.","summary":"Improper verification of signature threshold in tough","date_published":"2020-07-09T00:00:00.000Z","date_modified":"2024-08-04T13:08:21.000Z","tags":["T1110","T1040","T1078","T1557"],"_patchfirst":{"reason":"published","priority":20.3,"kev":null,"epss":{"score":0.01357,"percentile":0.71634},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"awslabs","product":"tough","techniqueIds":["T1110","T1040","T1078","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3356","url":"https://patchfirst.co/cve/CVE-2020-3356/","title":"CVE-2020-3356: Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.6 of 100.","summary":"Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability","date_published":"2020-06-18T00:00:00.000Z","date_modified":"2024-11-15T17:05:48.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.00801,"percentile":0.56584},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3233","url":"https://patchfirst.co/cve/CVE-2020-3233/","title":"CVE-2020-3233: Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco IOx. Not in CISA KEV. EPSS 0.6% (higher than 50.3% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.5 of 100.","summary":"Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability","date_published":"2020-06-03T00:00:00.000Z","date_modified":"2024-11-15T17:12:07.000Z","tags":["T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.5,"kev":null,"epss":{"score":0.00633,"percentile":0.50304},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco IOx","techniqueIds":["T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11082","url":"https://patchfirst.co/cve/CVE-2020-11082/","title":"CVE-2020-11082: Cross-Site Scripting in Kaminari","content_text":"kaminari · Kaminari. Not in CISA KEV. EPSS 1.5% (higher than 75% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.5 of 100.","summary":"Cross-Site Scripting in Kaminari","date_published":"2020-05-28T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.01546,"percentile":0.74963},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"kaminari","product":"Kaminari","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11035","url":"https://patchfirst.co/cve/CVE-2020-11035/","title":"CVE-2020-11035: weak CSRF tokens in GLPI","content_text":"glpi-project · GLPI. Not in CISA KEV. EPSS 0.9% (higher than 59.6% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.","summary":"weak CSRF tokens in GLPI","date_published":"2020-05-05T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1110","T1040","T1078","T1557"],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.00898,"percentile":0.59574},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"glpi-project","product":"GLPI","techniqueIds":["T1110","T1040","T1078","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5336","url":"https://patchfirst.co/cve/CVE-2020-5336/","title":"CVE-2020-5336: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","content_text":"Dell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.","summary":"RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability","date_published":"2020-05-04T00:00:00.000Z","date_modified":"2024-09-17T03:14:04.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00705,"percentile":0.53336},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"RSA Archer","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11030","url":"https://patchfirst.co/cve/CVE-2020-11030/","title":"CVE-2020-11030: Cross-site scripting (XSS) in Search block in WordPress","content_text":"WordPress · WordPress. Not in CISA KEV. EPSS 1.4% (higher than 73.1% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.1 of 100.","summary":"Cross-site scripting (XSS) in Search block in WordPress","date_published":"2020-04-30T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":19.1,"kev":null,"epss":{"score":0.01437,"percentile":0.73113},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"WordPress","product":"WordPress","techniqueIds":["T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5270","url":"https://patchfirst.co/cve/CVE-2020-5270/","title":"CVE-2020-5270: Open redirection when using back parameter of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 57.6% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1005 Data from Local System; T1036 Masquerading; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.4 of 100.","summary":"Open redirection when using back parameter of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1566.002","T1005","T1036","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.4,"kev":null,"epss":{"score":0.00832,"percentile":0.57598},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1566.002","T1005","T1036","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5269","url":"https://patchfirst.co/cve/CVE-2020-5269/","title":"CVE-2020-5269: Reflected XSS on AdminFeatures page of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.","summary":"Reflected XSS on AdminFeatures page of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00809,"percentile":0.56848},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5271","url":"https://patchfirst.co/cve/CVE-2020-5271/","title":"CVE-2020-5271: Reflected XSS with dashboard calendar of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.","summary":"Reflected XSS with dashboard calendar of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00809,"percentile":0.56848},"cvss":{"score":4.1,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5264","url":"https://patchfirst.co/cve/CVE-2020-5264/","title":"CVE-2020-5264: Reflected XSS in security compromised page of PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 55.1% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.1 of 100.","summary":"Reflected XSS in security compromised page of PrestaShop","date_published":"2020-04-20T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00755,"percentile":0.55097},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5266","url":"https://patchfirst.co/cve/CVE-2020-5266/","title":"CVE-2020-5266: Stored XSS on back office edit page","content_text":"PrestaShop · ps_linklist. Not in CISA KEV. EPSS 0.6% (higher than 50.5% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.2 of 100.","summary":"Stored XSS on back office edit page","date_published":"2020-04-16T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1189","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.2,"kev":null,"epss":{"score":0.00638,"percentile":0.50536},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"ps_linklist","techniqueIds":["T1189","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3121","url":"https://patchfirst.co/cve/CVE-2020-3121/","title":"CVE-2020-3121: Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco 550X Series Stackable Managed Switches. Not in CISA KEV. EPSS 1.1% (higher than 64.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.","summary":"Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability","date_published":"2020-01-26T00:00:00.000Z","date_modified":"2024-11-15T17:45:38.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.01066,"percentile":0.64723},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco 550X Series Stackable Managed Switches","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-15994","url":"https://patchfirst.co/cve/CVE-2019-15994/","title":"CVE-2019-15994: Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Stealthwatch Enterprise. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.1 of 100.","summary":"Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability","date_published":"2019-11-26T00:00:00.000Z","date_modified":"2024-11-21T19:04:42.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00801,"percentile":0.56586},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Stealthwatch Enterprise","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-15280","url":"https://patchfirst.co/cve/CVE-2019-15280/","title":"CVE-2019-15280: Cisco Firepower Management Center Software Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Firepower Management Center. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.3 of 100.","summary":"Cisco Firepower Management Center Software Stored Cross-Site Scripting Vulnerability","date_published":"2019-10-16T00:00:00.000Z","date_modified":"2024-11-21T19:06:59.000Z","tags":["T1189","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":13.3,"kev":null,"epss":{"score":0.00622,"percentile":0.49817},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Firepower Management Center","techniqueIds":["T1189","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3754","url":"https://patchfirst.co/cve/CVE-2019-3754/","title":"CVE-2019-3754: Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to…","content_text":"DELL EMC · Unity Operating Environment. Not in CISA KEV. EPSS 1.1% (higher than 65.9% of CVEs). CVSS 4.7 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 16.5 of 100.","summary":"Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to…","date_published":"2019-09-03T00:00:00.000Z","date_modified":"2024-09-17T02:00:48.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.01109,"percentile":0.65858},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.0"},"vendor":"DELL EMC","product":"Unity Operating Environment","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1943","url":"https://patchfirst.co/cve/CVE-2019-1943/","title":"CVE-2019-1943: Cisco Small Business Series Switches Open Redirect Vulnerability","content_text":"Cisco · Cisco Small Business 300 Series Managed Switches. Not in CISA KEV. EPSS 9.7% (higher than 95.5% of CVEs). CVSS 4.7 MEDIUM. Public exploit code exists. ATT&CK: T1557 Adversary-in-the-Middle; T1565.002 Transmitted Data Manipulation; T1189 Drive-by Compromise. Priority 27.4 of 100.","summary":"Cisco Small Business Series Switches Open Redirect Vulnerability","date_published":"2019-07-17T00:00:00.000Z","date_modified":"2024-11-21T19:18:29.000Z","tags":["public-exploit","T1557","T1565.002","T1189"],"_patchfirst":{"reason":"published","priority":27.4,"kev":null,"epss":{"score":0.09687,"percentile":0.95497},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Small Business 300 Series Managed Switches","techniqueIds":["T1557","T1565.002","T1189"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-1941","url":"https://patchfirst.co/cve/CVE-2019-1941/","title":"CVE-2019-1941: Cisco Identity Services Engine Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 1.3% (higher than 69.8% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 18.2 of 100.","summary":"Cisco Identity Services Engine Cross-Site Scripting Vulnerability","date_published":"2019-07-17T00:00:00.000Z","date_modified":"2024-11-21T19:18:49.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":18.2,"kev":null,"epss":{"score":0.01271,"percentile":0.69806},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Identity Services Engine Software","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1860","url":"https://patchfirst.co/cve/CVE-2019-1860/","title":"CVE-2019-1860: Cisco Unified Intelligence Center Remote File Injection Vulnerability","content_text":"Cisco · Cisco Unified Intelligence Center. Not in CISA KEV. EPSS 1.3% (higher than 69.5% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1557 Adversary-in-the-Middle; T1005 Data from Local System. Priority 18.0 of 100.","summary":"Cisco Unified Intelligence Center Remote File Injection Vulnerability","date_published":"2019-05-16T00:00:00.000Z","date_modified":"2024-11-21T19:24:32.000Z","tags":["T1557","T1005"],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.01257,"percentile":0.69518},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Unified Intelligence Center","techniqueIds":["T1557","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1715","url":"https://patchfirst.co/cve/CVE-2019-1715/","title":"CVE-2019-1715: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability","content_text":"Cisco · Cisco Adaptive Security Appliance (ASA) Software. Not in CISA KEV. EPSS 1.7% (higher than 77.5% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 19.2 of 100.","summary":"Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability","date_published":"2019-05-03T00:00:00.000Z","date_modified":"2024-11-19T19:08:18.000Z","tags":["T1110","T1040","T1078","T1557"],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.01726,"percentile":0.77525},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Adaptive Security Appliance (ASA) Software","techniqueIds":["T1110","T1040","T1078","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1838","url":"https://patchfirst.co/cve/CVE-2019-1838/","title":"CVE-2019-1838: Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.8% (higher than 56.9% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.2 of 100.","summary":"Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability","date_published":"2019-05-03T00:00:00.000Z","date_modified":"2024-11-21T19:32:17.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":15.2,"kev":null,"epss":{"score":0.0081,"percentile":0.56894},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Application Policy Infrastructure Controller (APIC)","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-6538","url":"https://patchfirst.co/cve/CVE-2019-6538/","title":"CVE-2019-6538: Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control","content_text":"Medtronic · Conexus Radio Frequency Telemetry Protocol. Not in CISA KEV. EPSS 0.9% (higher than 59.5% of CVEs). CVSS 9.3 CRITICAL. ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 19.8 of 100.","summary":"Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control","date_published":"2019-03-25T00:00:00.000Z","date_modified":"2025-05-22T19:26:15.000Z","tags":["T1005","T1499.004","T1557","T1574"],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.00895,"percentile":0.59505},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Medtronic","product":"Conexus Radio Frequency Telemetry Protocol","techniqueIds":["T1005","T1499.004","T1557","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1665","url":"https://patchfirst.co/cve/CVE-2019-1665/","title":"CVE-2019-1665: Cisco Hyperflex Stored Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco HyperFlex HX-Series. Not in CISA KEV. EPSS 1.1% (higher than 65.5% of CVEs). CVSS 4.7 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 16.4 of 100.","summary":"Cisco Hyperflex Stored Cross-Site Scripting Vulnerability","date_published":"2019-02-21T00:00:00.000Z","date_modified":"2024-11-21T19:45:22.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":16.4,"kev":null,"epss":{"score":0.01094,"percentile":0.65488},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco HyperFlex HX-Series","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15784","url":"https://patchfirst.co/cve/CVE-2018-15784/","title":"CVE-2018-15784: DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability","content_text":"Dell · Dell Networking OS10. Not in CISA KEV. EPSS 0.6% (higher than 49.2% of CVEs). CVSS 7.4 HIGH. ATT&CK: T1557 Adversary-in-the-Middle. Priority 15.0 of 100.","summary":"DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability","date_published":"2019-01-18T00:00:00.000Z","date_modified":"2024-09-16T22:51:06.000Z","tags":["T1557"],"_patchfirst":{"reason":"published","priority":15,"kev":null,"epss":{"score":0.0061,"percentile":0.49179},"cvss":{"score":7.4,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"Dell Networking OS10","techniqueIds":["T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15393","url":"https://patchfirst.co/cve/CVE-2018-15393/","title":"CVE-2018-15393: Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Content Security Management Appliance (SMA). Not in CISA KEV. EPSS 1.2% (higher than 69% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.","summary":"Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability","date_published":"2018-11-08T00:00:00.000Z","date_modified":"2024-11-26T14:22:45.000Z","tags":["T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.01232,"percentile":0.68952},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Content Security Management Appliance (SMA)","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-10610","url":"https://patchfirst.co/cve/CVE-2018-10610/","title":"CVE-2018-10610: An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application…","content_text":"WECON Technology Co., Ltd · LeviStudioU. Not in CISA KEV. EPSS 1.1% (higher than 66.1% of CVEs). ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 13.2 of 100.","summary":"An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application…","date_published":"2018-10-09T00:00:00.000Z","date_modified":"2024-09-16T21:04:28.000Z","tags":["T1005","T1499.004","T1557","T1574"],"_patchfirst":{"reason":"published","priority":13.2,"kev":null,"epss":{"score":0.01117,"percentile":0.66069},"cvss":null,"vendor":"WECON Technology Co., Ltd","product":"LeviStudioU","techniqueIds":["T1005","T1499.004","T1557","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-14809","url":"https://patchfirst.co/cve/CVE-2018-14809/","title":"CVE-2018-14809: Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote…","content_text":"Fuji Electric · V-Server. Not in CISA KEV. EPSS 2.7% (higher than 85.7% of CVEs). ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 17.1 of 100.","summary":"Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote…","date_published":"2018-09-26T00:00:00.000Z","date_modified":"2024-09-16T22:03:37.000Z","tags":["T1005","T1499.004","T1557","T1574"],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.02656,"percentile":0.85653},"cvss":null,"vendor":"Fuji Electric","product":"V-Server","techniqueIds":["T1005","T1499.004","T1557","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-11087","url":"https://patchfirst.co/cve/CVE-2018-11087/","title":"CVE-2018-11087: TLS validation error","content_text":"Pivotal · Spring AMQP. Not in CISA KEV. EPSS 1.2% (higher than 69% of CVEs). ATT&CK: T1557 Adversary-in-the-Middle. Priority 13.8 of 100.","summary":"TLS validation error","date_published":"2018-09-14T00:00:00.000Z","date_modified":"2024-09-17T03:58:41.000Z","tags":["T1557"],"_patchfirst":{"reason":"published","priority":13.8,"kev":null,"epss":{"score":0.01234,"percentile":0.69007},"cvss":null,"vendor":"Pivotal","product":"Spring AMQP","techniqueIds":["T1557"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}