Known Exploited Vulnerabilities Catalog - CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains …
The KEV Catalog - CISA
KEV Catalog (web) KEV Catalog (CSV) KEV Catalog (JSON) KEV Catalog (JSON schema) A detailed list of Known Exploited Vulnerabilities. Available as CSV and JSON files.
Reducing the Significant Risk of Known Exploited Vulnerabilities
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains …
BOD 22-01: Reducing the Significant Risk of Known Exploited
Nov 3, 2021 · Does CISA ever remove entries from the KEV catalog? CISA will only remove a vulnerability if the vendor’s security update for that vulnerability causes a significant …
KEV Catalog Reaches 1000, What Does That Mean and What Have …
Sep 18, 2023 · We’ve seen real positive change from the KEV and associated Binding Operational Directive. But we’re still in the first few laps of a long-distance race. Going forward, …
CISA Provides Criteria and Process for Updates to the KEV Catalog
Jun 7, 2022 · CISA has updated the Known Exploited Vulnerabilities (KEV) catalog webpage as well as the FAQs for Binding Operational Directive (BOD) 22-01, Reducing the Significant Risk …
CISA Releases Directive on Reducing the Significant Risk of Known ...
Nov 3, 2021 · CISA issued BOD 22-01 to drive federal agencies to mitigate actively exploited vulnerabilities on their networks, sending a clear message to all organizations across the …
CISA Mitigation Instructions for CVE-2025-0282
This page contains the mitigation instructions that correspond to the CISA KEV catalog entry CVE-2025-0282 – Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based …
CISA Adds One Vulnerability to the KEV Catalog
Jan 8, 2025 · CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0282 Ivanti Connect Secure …
Key Cyber Initiatives from CISA: KEV Catalog, CPGs, and PRNI
Jan 7, 2025 · The KEV Catalog, CPGs, and PRNI exemplify CISA’s commitment to fostering collaboration across public and private sectors. These initiatives have helped to reshape …