Configuration Manager
No CISA KEV deadline is open. CISA last added a Configuration Manager CVE on 12 Feb.
Tracked since 13 Feb · latest article Thu 20 Aug · RSS
Exploited, by due date
CSV downloadDeadlines passed
4 articles from 4 outlets since 13 Feb; the latest 67 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 20 Aug · 14:07 UTC | SecurityOnline | Critical SCCM flaw lets users hijack systems via AdminService API |
| Fri 13 Feb · 11:10 UTC | SecurityWeek | CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities |
| Fri 13 Feb · 10:05 UTC | The Hacker News | Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability |
| Fri 13 Feb · 09:35 UTC | Security Affairs | U.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalog |
Who reported 4 outlets, last 12 months
- Security Affairs1
- The Hacker News1
- SecurityWeek1
- SecurityOnline1
- Critical SCCM flaw lets users hijack systems via AdminService APISecurityOnline
- CISA Warns of Exploited SolarWinds, Notepad++, Microsoft VulnerabilitiesSecurityWeek
- Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News
- U.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.