CISA Known Exploited Vulnerabilities
KEV additions — February 2025
26 CVEs entered the KEV catalog in February 2025.
Added February 25, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 9 | 89.0 % | March 18, 2025 |
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability | 9.8 | 6.2 % | March 18, 2025 |
Added February 24, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 8.8 | 69.0 % | March 17, 2025 |
Added February 21, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability | 9.8 | 25.7 % | March 14, 2025 |
Added February 20, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability | 6.5 | 2.0 % | March 13, 2025 |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability | 8.1 | 4.7 % | March 13, 2025 |
Added February 18, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-53704ransomware | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 9.8 | 93.9 % | March 11, 2025 |
| CVE-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 9.1 | 94.0 % | March 11, 2025 |
Added February 13, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-57727ransomware | SimpleHelp Path Traversal Vulnerability | 7.5 | 94.0 % | March 6, 2025 |
Added February 12, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-41710 | Mitel SIP Phones Argument Injection Vulnerability | 7.2 | 21.6 % | March 5, 2025 |
| CVE-2025-24200 | Apple iOS and iPadOS Incorrect Authorization Vulnerability | 6.1 | 41.1 % | March 5, 2025 |
Added February 11, 20254
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-40890 | Zyxel DSL CPE OS Command Injection Vulnerability | 8.8 | 13.0 % | March 4, 2025 |
| CVE-2024-40891 | Zyxel DSL CPE OS Command Injection Vulnerability | 8.8 | 39.3 % | March 4, 2025 |
| CVE-2025-21391 | Microsoft Windows Storage Link Following Vulnerability | 7.1 | 2.2 % | March 4, 2025 |
| CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | 7.8 | 8.4 % | March 4, 2025 |
Added February 7, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability | 8.8 | 77.8 % | February 28, 2025 |
Added February 6, 20255
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability | 9.8 | 82.6 % | February 27, 2025 |
| CVE-2020-29574 | CyberoamOS (CROS) SQL Injection Vulnerability | 9.8 | 8.4 % | February 27, 2025 |
| CVE-2022-23748 | Dante Discovery Process Control Vulnerability | 7.8 | 11.7 % | February 27, 2025 |
| CVE-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability | 9.8 | 93.5 % | February 27, 2025 |
| CVE-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability | 7 | 33.8 % | February 27, 2025 |
Added February 5, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-53104 | Linux Kernel Out-of-Bounds Write Vulnerability | 7.8 | 11.1 % | February 26, 2025 |
Added February 4, 20254
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-19410 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | 9.8 | 91.8 % | February 25, 2025 |
| CVE-2018-9276 | Paessler PRTG Network Monitor OS Command Injection Vulnerability | 7.2 | 81.5 % | February 25, 2025 |
| CVE-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability | 7.5 | 93.9 % | February 25, 2025 |
| CVE-2024-45195 | Apache OFBiz Forced Browsing Vulnerability | 7.5 | 94.1 % | February 25, 2025 |