위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 16시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,345
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 79 | CVE-2025-68613 | — T7.9 | 99.9% | KEV익스공개 EPSS 100%원격 | n8n n8n |
| 79 | CVE-2022-36804 | — T7.9 | 99.9% | KEVPoC EPSS 100%원격 | Atlassian Bitbucket Server and Data Center |
| 79 | CVE-2020-10199 | — T7.9 | 99.9% | KEVPoC EPSS 100%원격 | Sonatype Nexus Repository |
| 79 | CVE-2025-49113 | — T7.9 | 99.9% | KEVPoC EPSS 100%원격 | Roundcube Webmail |
| 79 | CVE-2019-17558 | — T6.7 | 99.9% | KEVPoC EPSS 100%원격 | Apache Solr |
| 79 | CVE-2024-9463 | — T8.2 | 99.9% | KEVPoC EPSS 100%원격 | Palo Alto Networks Expedition |
| 79 | CVE-2024-20767 | — T6.7 | 99.9% | KEVPoC EPSS 100%원격 | Adobe ColdFusion |
| 79 | CVE-2020-17519 | — T6.7 | 99.9% | KEVPoC EPSS 100%원격 | Apache Flink |
| 79 | CVE-2020-1956 | — T7.9 | 99.9% | KEVPoC EPSS 100%원격 | Apache Kylin |
| 79 | CVE-2025-54236 | — T8.2 | 99.9% | KEVPoC EPSS 100%원격 | Adobe Commerce and Magento |
| 79 | CVE-2024-48248 | — T7.7 | 99.8% | KEV익스공개 EPSS 100%원격 | NAKIVO Backup and Replication |
| 79 | CVE-2025-4008 | 8.8 T7.9 | 99.8% | KEV익스공개 EPSS 100%원격 | Smartbedded Meteobridge |
| 79 | CVE-2019-2616 | — T6.5 | 99.8% | KEVPoC EPSS 100%원격 | Oracle BI Publisher (Formerly XML Publisher) |
| 79 | CVE-2024-13160 | — T6.7 | 99.8% | KEV익스공개 EPSS 100%원격 | Ivanti Endpoint Manager (EPM) |
| 79 | CVE-2024-13161 | — T6.7 | 99.8% | KEV익스공개 EPSS 100%원격 | Ivanti Endpoint Manager (EPM) |
| 79 | CVE-2025-4428 | — T7.9 | 99.7% | KEVPoC EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) |
| 79 | CVE-2023-38950 | — T6.7 | 99.7% | KEV익스공개 EPSS 100%원격 | ZKTeco BioTime |
| 79 | CVE-2025-8110 | — T8.0 | 99.7% | KEVPoC EPSS 100%원격 | Gogs Gogs |
| 79 | CVE-2024-42009 | — T8.4 | 99.6% | KEVPoC EPSS 100%원격 | Roundcube Webmail |
| 79 | CVE-2023-49103 | — T6.8 | 99.6% | KEVPoC EPSS 100%원격 | ownCloud ownCloud graphapi |
| 79 | CVE-2025-6204 | — T8.2 | 99.5% | KEV익스공개 EPSS 100%원격 | Dassault Systèmes DELMIA Apriso |
| 79 | CVE-2023-44221 | — T7.9 | 99.5% | KEV익스공개 EPSS 99%원격 | SonicWall SMA100 Appliances |
| 79 | CVE-2019-9978 | — T5.5 | 99.4% | KEVPoC EPSS 99%원격 | WordPress Social Warfare Plugin |
| 79 | CVE-2023-35081 | — T6.5 | 99.2% | KEV익스공개 EPSS 99%원격 | Ivanti Endpoint Manager Mobile (EPMM) |
| 79 | CVE-2025-4632 | — T8.8 | 97.7% | KEV익스공개 EPSS 98%원격 | Samsung MagicINFO 9 Server |
| 79 | CVE-2015-5317 | — T8.8 | 97.6% | KEV익스공개 EPSS 98%원격 | Jenkins Jenkins User Interface (UI) |
| 79 | CVE-2024-38813 | — T8.8 | 97.0% | KEV익스공개 EPSS 97%원격 | VMware vCenter Server |
| 79 | CVE-2024-12686 | — T8.8 | 96.3% | KEV익스공개 EPSS 96%원격 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) |
| 78 | CVE-2019-0543 | 7.8 | 91.2% | KEV랜섬PoC EPSS 91% | Microsoft Windows |
| 75 | CVE-2015-1635 | — | 100.0% | KEVPoC EPSS 100% | Microsoft HTTP.sys |
| 75 | CVE-2014-0160 | — T8.8 | 100.0% | KEVPoC EPSS 100% | OpenSSL OpenSSL |
| 75 | CVE-2019-9670 | — T8.8 | 100.0% | KEVPoC EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) |
| 75 | CVE-2024-38475 | — T8.8 | 100.0% | KEV익스공개 EPSS 100% | Apache HTTP Server |
| 75 | CVE-2015-3113 | — | 100.0% | KEVPoC EPSS 100% | Adobe Flash Player |
| 75 | CVE-2022-35405 | — | 100.0% | KEV EPSS 100% | Zoho ManageEngine |
| 75 | CVE-2024-45519 | — | 100.0% | KEV EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) |
| 75 | CVE-2014-0497 | — | 100.0% | KEVPoC EPSS 100% | Adobe Flash Player |
| 75 | CVE-2021-37415 | — | 100.0% | KEV EPSS 100% | Zoho ManageEngine ServiceDesk Plus (SDP) |
| 75 | CVE-2020-13927 | — T8.8 | 100.0% | KEVPoC EPSS 100% | Apache Airflow's Experimental API |
| 75 | CVE-2019-16759 | — | 100.0% | KEVPoC EPSS 100% | vBulletin vBulletin |
| 75 | CVE-2017-1000353 | — | 100.0% | KEVPoC EPSS 100% | Jenkins Jenkins |
| 75 | CVE-2021-31166 | — | 100.0% | KEV EPSS 100% | Microsoft HTTP Protocol Stack |
| 75 | CVE-2018-20062 | — | 99.9% | KEVPoC EPSS 100% | ThinkPHP noneCms |
| 75 | CVE-2018-0171 | — | 99.9% | KEVPoC EPSS 100% | Cisco IOS and IOS XE |
| 75 | CVE-2018-2628 | — | 99.9% | KEVPoC EPSS 100% | Oracle WebLogic Server |
| 75 | CVE-2023-34048 | — | 99.9% | KEV EPSS 100% | VMware vCenter Server |
| 75 | CVE-2022-0543 | — | 99.9% | KEV EPSS 100% | Redis Debian-specific Redis Servers |
| 75 | CVE-2015-5119 | — | 99.9% | KEVPoC EPSS 100% | Adobe Flash Player |
| 75 | CVE-2020-0646 | — | 99.9% | KEVPoC EPSS 100% | Microsoft .NET Framework |
| 75 | CVE-2022-24086 | — | 99.9% | KEV EPSS 100% | Adobe Commerce and Magento Open Source |