CISA Known Exploited Vulnerabilities
KEV additions — February 2023
13 CVEs entered the KEV catalog in February 2023.
Added February 27, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-36537ransomware | ZK Framework AuUploader Unspecified Vulnerability | 7.5 | 93.9 % | March 20, 2023 |
Added February 21, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-40765ransomware | Mitel MiVoice Connect Command Injection Vulnerability | 6.8 | 3.0 % | March 14, 2023 |
| CVE-2022-41223ransomware | Mitel MiVoice Connect Code Injection Vulnerability | 6.8 | 3.2 % | March 14, 2023 |
| CVE-2022-47986ransomware | IBM Aspera Faspex Code Execution Vulnerability | 9.8 | 94.3 % | March 14, 2023 |
Added February 16, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-46169 | Cacti Command Injection Vulnerability | 9.8 | 94.5 % | March 9, 2023 |
Added February 14, 20234
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability | 7.3 | 0.7 % | March 7, 2023 |
| CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 7.8 | 4.2 % | March 7, 2023 |
| CVE-2023-23376ransomware | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 21.1 % | March 7, 2023 |
| CVE-2023-23529 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 0.1 % | March 7, 2023 |
Added February 10, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-24990ransomware | TerraMaster OS Remote Command Execution Vulnerability | 7.5 | 94.4 % | March 3, 2023 |
| CVE-2023-0669ransomware | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 7.2 | 94.4 % | March 3, 2023 |
Added February 2, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-21587ransomware | Oracle E-Business Suite Unspecified Vulnerability | 9.8 | 94.4 % | February 23, 2023 |
| CVE-2023-22952 | Multiple SugarCRM Products Remote Code Execution Vulnerability | 8.8 | 93.1 % | February 23, 2023 |