KEV

Known Exploited Vulnerabilities Catalog

External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: caeb2787-0d58-4236-9039-7c86c3e566f3 (KEVIntel)

KEV Entries
2523
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
CVE-2015-2291 Confirmed
Asserted: 2023-02-10
Yes 2023-02-10
First seen: 2023-02-10
1 source
public_report
- Details
CVE-2023-0669
Fortra - Goanywhere MFT
Confirmed
Asserted: 2023-02-10
Yes 2023-02-10
First seen: 2023-02-10
1 source
public_report
- Details
CVE-2022-24990 Confirmed
Asserted: 2023-02-10
Yes 2023-02-10
First seen: 2023-02-10
1 source
public_report
- Details
CVE-2023-22952 Confirmed
Asserted: 2023-02-02
Yes 2023-02-02
First seen: 2023-02-02
1 source
public_report
- Details
CVE-2022-21587
Oracle Corporation - Web Applications Desktop Integrator
Confirmed
Asserted: 2023-02-02
Yes 2023-02-02
First seen: 2023-02-02
1 source
public_report
- Details
CVE-2017-11357 Confirmed
Asserted: 2023-01-26
Yes 2023-01-26
First seen: 2023-01-26
1 source
public_report
- Details
CVE-2022-47966 Confirmed
Asserted: 2023-01-23
Yes 2023-01-23
First seen: 2023-01-23
1 source
public_report
- Details
CVE-2022-44877 Confirmed
Asserted: 2023-01-17
Yes 2023-01-17
First seen: 2023-01-17
1 source
public_report
- Details
CVE-2022-41080
Microsoft - Microsoft Exchange Server 2016 Cumulative Update 23 , Microsoft - Microsoft Exchange Server 2019 Cumulative Update 12 +3 more
Confirmed
Asserted: 2023-01-10
Yes 2023-01-10
First seen: 2023-01-10
1 source
public_report
- Details
CVE-2023-21674
Microsoft - Windows 10 Version 1809 , Microsoft - Windows Server 2019 +14 more
Confirmed
Asserted: 2023-01-10
Yes 2023-01-10
First seen: 2023-01-10
1 source
public_report
- Details
displaying 1511 - 1520 KEV entries in total 2523
About this Catalog

Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.