Ransomware Vulnerabilities
Page 4 of 4. 361 CISA KEV entries marked as known to be used in ransomware campaigns.
Ransomware-Linked Entries
361 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability Ransomware | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 45.2% | 2021-11-03 | 2022-05-03 |
| CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability Ransomware | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 4.2% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ransomware | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ransomware | 9.9 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ransomware | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ransomware | 8.0 | 98.5% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Ransomware | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Ransomware | 9.8 | 95.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Ransomware | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Ransomware | 9.8 | 8.1% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerability Ransomware | Microsoft Windows Privilege Escalation Vulnerability Ransomware | 7.8 | 19.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Ransomware | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Ransomware | 7.5 | 30.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Ransomware | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Ransomware | 7.5 | 52.4% | 2021-11-03 | 2022-05-03 |
| CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Ransomware | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Ransomware | 9.8 | 99.7% | 2021-11-03 | 2022-05-03 |
| CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Ransomware | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Ransomware | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Ransomware | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Ransomware | 9.8 | 97.3% | 2021-11-03 | 2022-05-03 |
| CVE-2019-5591 Fortinet FortiOS Default Configuration Vulnerability Ransomware | Fortinet FortiOS Default Configuration Vulnerability Ransomware | 6.5 | 18.6% | 2021-11-03 | 2022-05-03 |
| CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability Ransomware | SonicWall SMA100 SQL Injection Vulnerability Ransomware | 7.5 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Ransomware | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Ransomware | 8.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0878 Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Ransomware | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Ransomware | 4.2 | 2.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Ransomware | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Ransomware | 7.5 | 30.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability Ransomware | Sophos SFOS SQL Injection Vulnerability Ransomware | 10.0 | 42.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Ransomware | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Ransomware | 7.5 | 45.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability Ransomware | Microsoft Netlogon Privilege Escalation Vulnerability Ransomware | 5.5 | 99.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Ransomware | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Ransomware | 6.1 | 85.6% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability Ransomware | VMware ESXi OpenSLP Use-After-Free Vulnerability Ransomware | 9.8 | 83.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Ransomware | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2021-1675 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Ransomware | Microsoft Windows Print Spooler Remote Code Execution Vulnerability Ransomware | 7.8 | 85.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1732 Microsoft Win32k Privilege Escalation Vulnerability Ransomware | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 78.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability Ransomware | SonicWall SSLVPN SMA100 SQL Injection Vulnerability Ransomware | 9.8 | 40.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability Ransomware | SonicWall Email Security Improper Privilege Management Vulnerability Ransomware | 9.8 | 88.8% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability Ransomware | SonicWall Email Security Unrestricted Upload of File Vulnerability Ransomware | 7.2 | 16.6% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability Ransomware | SonicWall Email Security Path Traversal Vulnerability Ransomware | 4.9 | 51.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability Ransomware | VMware vCenter Server Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability Ransomware | VMware vCenter Server Improper Input Validation Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22005 VMware vCenter Server File Upload Vulnerability Ransomware | VMware vCenter Server File Upload Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22205 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Ransomware | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Ransomware | 10.0 | 99.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability Ransomware | Ivanti Pulse Connect Secure Use-After-Free Vulnerability Ransomware | 10.0 | 47.2% | 2021-11-03 | 2022-05-03 |
| CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Ransomware | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Ransomware | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability Ransomware | Microsoft Internet Explorer Memory Corruption Vulnerability Ransomware | 8.8 | 80.8% | 2021-11-03 | 2021-11-17 |
| CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 9.1 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 7.8 | 95.8% | 2021-11-03 | 2022-05-03 |
| CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 7.8 | 93.7% | 2021-11-03 | 2022-05-03 |
| CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 7.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2021-27101 Accellion FTA SQL Injection Vulnerability Ransomware | Accellion FTA SQL Injection Vulnerability Ransomware | 9.8 | 6.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27102 Accellion FTA OS Command Injection Vulnerability Ransomware | Accellion FTA OS Command Injection Vulnerability Ransomware | 7.8 | 3.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Ransomware | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Ransomware | 9.8 | 11.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability Ransomware | Accellion FTA OS Command Injection Vulnerability Ransomware | 9.8 | 56.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-30116 Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Ransomware | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Ransomware | 10.0 | 85.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-31207 Microsoft Exchange Server Security Feature Bypass Vulnerability Ransomware | Microsoft Exchange Server Security Feature Bypass Vulnerability Ransomware | 6.6 | 99.8% | 2021-11-03 | 2021-11-17 |
| CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 9.1 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-34523 Microsoft Exchange Server Privilege Escalation Vulnerability Ransomware | Microsoft Exchange Server Privilege Escalation Vulnerability Ransomware | 9.0 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-34527 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Ransomware | Microsoft Windows Print Spooler Remote Code Execution Vulnerability Ransomware | 8.8 | 99.8% | 2021-11-03 | 2022-05-03 |
| CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Vulnerability Ransomware | SolarWinds Serv-U Remote Code Execution Vulnerability Ransomware | 9.0 | 91.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-35464 ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Ransomware | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36942 Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability Ransomware | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability Ransomware | 7.5 | 66.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-36955 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Ransomware | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Ransomware | 7.8 | 4.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-38647 Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Ransomware | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability Ransomware | Microsoft MSHTML Remote Code Execution Vulnerability Ransomware | 8.8 | 97.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Ransomware | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Ransomware | 9.8 | 99.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-41773 Apache HTTP Server Path Traversal Vulnerability Ransomware | Apache HTTP Server Path Traversal Vulnerability Ransomware | 7.5 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-42013 Apache HTTP Server Path Traversal Vulnerability Ransomware | Apache HTTP Server Path Traversal Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability Ransomware | BQE BillQuick Web Suite SQL Injection Vulnerability Ransomware | 9.8 | 74.4% | 2021-11-03 | 2021-11-17 |