CISA Adds 15 Known Exploited Vulnerabilities to Catalog

Original release date: January 10, 2022CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and pose significant risk to the federal enterprise. CVE Number CVE Title Remediation Due Date CVE-2021-22017 VMware vCenter Server Improper Access Control Vulnerability 1/24/2022 CVE-2021-36260   Hikvision Improper Input Validation Vulnerability 1/24/2022 CVE-2021-27860...