CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2020-8657 EyesOfNetwork Use of Hard-Coded Credentials Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8655 EyesOfNetwork Improper Privilege Management Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2020-8644 PlaySMS Server-Side Template Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Trend Micro Trend Micro OfficeScan, Trend Micro Apex One Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability Trend Micro Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-8467 Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Trend Micro Trend Micro OfficeScan, Trend Micro Apex One Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability n/a Pulse Connect Secure / Pulse Policy Secure Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-8243 Ivanti Pulse Connect Secure Code Execution Vulnerability n/a Pulse Connect Secre Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-8218 Pulse Connect Secure Code Injection Vulnerability n/a Pulse Connect Secure Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability n/a Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-6820 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla Thunderbird, Mozilla Firefox, Mozilla Firefox ESR Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2020-6819 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla Thunderbird, Mozilla Firefox, Mozilla Firefox ESR Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2020-6572 Google Chrome Media Use-After-Free Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-6418 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard) Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability SAP SE SAP Solution Manager (User Experience Monitoring) Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability n/a BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2020-5849 Unraid Authentication Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2020-5847 Unraid Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.