Notices by CISA KEV Tracker (cisakevtracker@mastodon.social)

CVE ID: CVE-2025-31324
Vendor: SAP
Product: NetWeaver
Date Added: 2025-04-29
Vulnerability: SAP NetWeaver Unrestricted File Upload Vulnerability
Notes: https://me.sap.com/notes/3594142 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31324
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-31324

CVE ID: CVE-2025-24813
Vendor: Apache
Product: Tomcat
Date Added: 2025-04-01
Vulnerability: Apache Tomcat Path Equivalence Vulnerability
Notes: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq ; https://nvd.nist.gov/vuln/detail/CVE-2025-24813
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-24813

CVE ID: CVE-2024-13161
Vendor: Ivanti
Product: Endpoint Manager (EPM)
Date Added: 2025-03-10
Vulnerability: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Notes: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13161
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-13161

CVE ID: CVE-2025-23006
Vendor: SonicWall
Product: SMA1000 Appliances
Date Added: 2025-01-24
Vulnerability: SonicWall SMA1000 Appliances Deserialization Vulnerability
Notes: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-23006

CVE ID: CVE-2024-55956
Vendor: Cleo
Product: Multiple Products
Date Added: 2024-12-17
Vulnerability: Cleo Multiple Products Unauthenticated File Upload Vulnerability
Notes: https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update-CVE-2024-55956 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55956
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-55956

CVE ID: CVE-2024-23113
Vendor: Fortinet
Product: Multiple Products
Date Added: 2024-10-09
Vulnerability: Fortinet Multiple Products Format String Vulnerability
Notes: https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-23113

CVE ID: CVE-2024-43047
Vendor: Qualcomm
Product: Multiple Chipsets
Date Added: 2024-10-08
Vulnerability: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Notes: https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43047
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-43047

CVE ID: CVE-2024-7593
Vendor: Ivanti
Product: Virtual Traffic Manager
Date Added: 2024-09-24
Vulnerability: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
Notes: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 ; https://nvd.nist.gov/vuln/detail/CVE-2024-7593
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-7593

CVE ID: CVE-2020-14644
Vendor: Oracle
Product: WebLogic Server
Date Added: 2024-09-18
Vulnerability: Oracle WebLogic Server Remote Code Execution Vulnerability
Notes: https://www.oracle.com/security-alerts/cpujul2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-14644
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2020-14644

CVE ID: CVE-2021-31196
Vendor: Microsoft
Product: Exchange Server
Date Added: 2024-08-21
Vulnerability: Microsoft Exchange Server Information Disclosure Vulnerability
Notes: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2021-31196