CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco IOS, Cisco Cisco IOS XE Software Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco IOS, IntelliShield Universal Product Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2017-6627 Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability n/a Cisco IOS and Cisco IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-6334 NETGEAR DGN2200 Devices OS Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability Symantec Corporation Messaging Gateway Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-6077 NETGEAR DGN2200 Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-5638 Apache Struts Remote Code Execution Vulnerability Apache Software Foundation Apache Struts Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-5070 Google Chromium V8 Type Confusion Vulnerability n/a Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-5030 Google Chromium V8 Memory Corruption Vulnerability n/a Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability n/a Cisco IOS and IOS XE Software Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability Oracle Corporation WebLogic Server Versions & vendor guidance →	Known exploitedCISA KEV	7.4High
CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability n/a Adobe ColdFusion ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-18362 Kaseya VSA SQL Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-17562 Embedthis GoAhead Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2017-12617 Apache Tomcat Remote Code Execution Vulnerability Apache Software Foundation Apache Tomcat Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-12615 Apache Tomcat on Windows Remote Code Execution Vulnerability Apache Software Foundation Apache Tomcat Versions & vendor guidance →	Known exploitedCISA KEV	8.1High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.