Top 10 Routinely Exploited Vulnerabilities | CISA
Tags
country: China North Korea Iran
attack-pattern: Data Direct Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Software - T1592.002 Visual Basic - T1059.005 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002
Show in Graph
Common Information
Type Value
UUID f7ee192f-4e79-4f4c-bf32-1ecb4ee15e17
Fingerprint 36702d13bf71cbc3
Analysis status DONE
Considered CTI value -2
Text language
Published May 12, 2020, noon
Added to db Feb. 17, 2023, 9:31 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Top 10 Routinely Exploited Vulnerabilities
Title Top 10 Routinely Exploited Vulnerabilities | CISA
Detected Hints/Tags/Attributes 67/2/53
Source URLs
Redirection Url
Details Source https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-133a
Details Redirection https://www.cisa.gov/uscert/ncas/alerts/aa20-133a
Details Source https://www.us-cert.gov/ncas/alerts/aa20-133a
URL Provider
Details Provider Source level domain
Details cisa.gov www.cisa.gov
Details us-cert.gov www.us-cert.gov
Attributes
Details Type #Events CTI Value
Details CVE 375 
cve-2017-11882
Details CVE 269 
cve-2017-0199
Details CVE 122 
cve-2017-5638
Details CVE 176 
cve-2012-0158
Details CVE 58 
cve-2019-0604
Details CVE 47 
cve-2017-0143
Details CVE 92 
cve-2018-4878
Details CVE 57 
cve-2017-8759
Details CVE 48 
cve-2015-1641
Details CVE 56 
cve-2018-7600
Details CVE 161 
cve-2019-19781
Details CVE 128 
cve-2019-11510
Details Domain 641 
nvd.nist.gov
Details Domain 145 
www.us-cert.gov
Details Domain 469 
www.cisa.gov
Details Domain 55 
cisa.dhs.gov
Details Domain 128 
www.fbi.gov
Details Domain 56 
fbi.gov
Details Email 1 
vulnerability_info@cisa.dhs.gov
Details Email 29 
cywatch@fbi.gov
Details Email 22 
cisaservicedesk@cisa.dhs.gov
Details File 3 
fireeye-and-citrix-tool-scans-for-iocs-related-to-vulnerability.html
Details IPv4 10 
2.5.10.1
Details IPv4 9 
28.0.0.161
Details Url 4 
https://nvd.nist.gov/vuln/detail/cve-2017-11882
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133e
Details Url 5 
https://nvd.nist.gov/vuln/detail/cve-2017-0199
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133g
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133h
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133p
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133i
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133j
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133k
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133l
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133n
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133o
Details Url 2 
https://nvd.nist.gov/vuln/detail/cve-2019-0604
Details Url 2 
https://nvd.nist.gov/vuln/detail/cve-2017-0143
Details Url 1 
https://nvd.nist.gov/vuln/detail/cve-2018-4878
Details Url 1 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133d
Details Url 2 
https://nvd.nist.gov/vuln/detail/cve-2017-8759
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133f
Details Url 2 
https://nvd.nist.gov/vuln/detail/cve-2015-1641
Details Url 2 
https://www.us-cert.gov/ncas/analysis-reports/ar20-133m
Details Url 2 
https://nvd.nist.gov/vuln/detail/cve-2018-7600
Details Url 2 
https://www.us-cert.gov/ncas/alerts/aa20-020a
Details Url 4 
https://www.us-cert.gov/ncas/alerts/aa20-031a
Details Url 2 
https://www.fireeye.com/blog/products-and-services/2020/01/fireeye-and-citrix-tool-scans-for-iocs-related-to-vulnerability.html
Details Url 2 
https://nvd.nist.gov/vuln/detail/cve-2019-19781
Details Url 1 
https://www.microsoft.com/security/blog/2020/04/28/ransomware-groups-continue-to-target-healthcare-critical-services-heres-how-to-reduce-risk
Details Url 1 
https://www.us-cert.gov/ncas/alerts/aa20-120a
Details Url 2 
https://www.cisa.gov/cyber-essentials
Details Url 1 
https://www.fbi.gov/contact-us/field