CISA Known Exploited Vulnerabilities
KEV additions — November 2023
18 CVEs entered the KEV catalog in November 2023.
Added November 30, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | 7.5 | 94.3 % | December 21, 2023 |
| CVE-2023-6345 | Google Skia Integer Overflow Vulnerability | 9.6 | 0.6 % | December 21, 2023 |
Added November 21, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-4911 | GNU C Library Buffer Overflow Vulnerability | 7.8 | 64.7 % | December 12, 2023 |
Added November 16, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-2551 | Oracle Fusion Middleware Unspecified Vulnerability | 9.8 | 94.4 % | December 7, 2023 |
| CVE-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | 9.8 | 94.3 % | December 7, 2023 |
| CVE-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 5.4 | 15.4 % | December 7, 2023 |
Added November 14, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 8.8 | 90.2 % | December 5, 2023 |
| CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 7.8 | 0.8 % | December 5, 2023 |
| CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 7.8 | 0.9 % | December 5, 2023 |
Added November 13, 20236
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 5.3 | 94.3 % | November 17, 2023 |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 9.8 | 94.4 % | November 17, 2023 |
| CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 94.2 % | November 17, 2023 |
| CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 94.0 % | November 17, 2023 |
| CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 15.6 % | November 17, 2023 |
| CVE-2023-47246ransomware | SysAid Server Path Traversal Vulnerability | 9.8 | 94.3 % | December 4, 2023 |
Added November 8, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29552 | Service Location Protocol (SLP) Denial-of-Service Vulnerability | 7.5 | 93.0 % | November 29, 2023 |
Added November 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-22518ransomware | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 9.8 | 94.4 % | November 28, 2023 |
Added November 2, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-46604ransomware | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 9.8 | 94.4 % | November 23, 2023 |