https://patchfirst.co/technique/T1059.007/New and newly exploited CVEs that lead to ATT&CK T1059.007 JavaScript, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-42897/CVE-2026-42897#kevFri, 15 May 2026 00:00:00 GMTMicrosoft · Microsoft. In CISA KEV since 2026-05-15. ENISA EUVD lists it as exploited. EPSS 70.7% (higher than 99.39% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 72.1 of 100.kevpublic-exploitT1189T1059.007https://patchfirst.co/cve/CVE-2025-48700/CVE-2025-48700#kevMon, 20 Apr 2026 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1056 Input Capture; T1059.007 JavaScript. Priority 62.7 of 100.kevT1566.002T1056T1059.007https://patchfirst.co/cve/CVE-2025-66376/CVE-2025-66376#kevWed, 18 Mar 2026 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-03-18. ENISA EUVD lists it as exploited. EPSS 20.2% (higher than 97.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.001 Spearphishing Attachment; T1059.007 JavaScript. Priority 66.8 of 100.kevT1566.001T1059.007https://patchfirst.co/cve/CVE-2025-68461/CVE-2025-68461#kevFri, 20 Feb 2026 00:00:00 GMTRoundcube · Webmail. In CISA KEV since 2026-02-20. ENISA EUVD lists it as exploited. EPSS 27.4% (higher than 98.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 71.9 of 100.kevpublic-exploitT1204.001T1059.007https://patchfirst.co/cve/CVE-2021-26829/CVE-2021-26829#kevFri, 28 Nov 2025 00:00:00 GMTOpenPLC · ScadaBR. In CISA KEV since 2025-11-28. ENISA EUVD lists it as exploited. EPSS 48.0% (higher than 98.9% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1059.007 JavaScript. Priority 66.6 of 100.kevpublic-exploitT1059.007https://patchfirst.co/cve/CVE-2010-3765/CVE-2010-3765#kevMon, 06 Oct 2025 00:00:00 GMTMozilla · Multiple Products. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 83.2% (higher than 99.68% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript. Priority 69.8 of 100.kevpublic-exploitT1059.007https://patchfirst.co/cve/CVE-2013-3893/CVE-2013-3893#kevTue, 12 Aug 2025 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2025-08-12. ENISA EUVD lists it as exploited. EPSS 87.6% (higher than 99.76% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 54.1 of 100.kevpublic-exploitT1189T1059.007https://patchfirst.co/cve/CVE-2025-34028/CVE-2025-34028#kevFri, 02 May 2025 00:00:00 GMTCommvault · Command Center. In CISA KEV since 2025-05-02. ENISA EUVD lists it as exploited. EPSS 97.6% (higher than 99.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript. Priority 70.0 of 100.kevpublic-exploitT1190T1059.007https://patchfirst.co/cve/CVE-2020-11023/CVE-2020-11023#kevThu, 23 Jan 2025 00:00:00 GMTJQuery · JQuery. In CISA KEV since 2025-01-23. ENISA EUVD lists it as exploited. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 67.2 of 100.kevpublic-exploitT1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2014-2120/CVE-2014-2120#kevTue, 12 Nov 2024 00:00:00 GMTCisco · Adaptive Security Appliance (ASA). In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS 22.6% (higher than 97.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 61.8 of 100.kevT1204.001T1059.007https://patchfirst.co/cve/CVE-2024-37383/CVE-2024-37383#kevThu, 24 Oct 2024 00:00:00 GMTRoundcube · Webmail. In CISA KEV since 2024-10-24. ENISA EUVD lists it as exploited. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.2 of 100.kevpublic-exploitT1204.001T1059.007https://patchfirst.co/cve/CVE-2023-5631/CVE-2023-5631#kevThu, 26 Oct 2023 00:00:00 GMTRoundcube · Webmail. In CISA KEV since 2023-10-26. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1041 Exfiltration Over C2 Channel. Priority 66.7 of 100.kevpublic-exploitT1204.001T1059.007T1041https://patchfirst.co/cve/CVE-2023-22515/CVE-2023-22515#kevThu, 05 Oct 2023 00:00:00 GMTAtlassian · Confluence Data Center and Server. In CISA KEV since 2023-10-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1136 Create Account; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059.007T1136T1059T1078https://patchfirst.co/cve/CVE-2023-37580/CVE-2023-37580Mon, 31 Jul 2023 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-07-27. ENISA EUVD lists it as exploited. EPSS 49.1% (higher than 98.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.0 of 100.kevpublic-exploitT1204.001T1059.007https://patchfirst.co/cve/CVE-2022-27926/CVE-2022-27926#kevMon, 03 Apr 2023 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-04-03. ENISA EUVD lists it as exploited. EPSS 17.6% (higher than 97.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Named in 1 threat report. Priority 70.6 of 100.kevpublic-exploitT1189T1059.007https://patchfirst.co/cve/CVE-2023-26360/CVE-2023-26360Thu, 23 Mar 2023 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2023-03-15. ENISA EUVD lists it as exploited. EPSS 97.3% (higher than 99.9% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1003.001 LSASS Memory; T1036.005 Match Legitimate Resource Name or Location; T1046 Network Service Discovery; T1071.001 Web Protocols; +3 more. Priority 69.0 of 100.kevpublic-exploitT1190T1059.007T1003.001T1036.005T1046T1071.001T1105T1484.001T1505.003https://patchfirst.co/cve/CVE-2022-22963/CVE-2022-22963#kevThu, 25 Aug 2022 00:00:00 GMTVMware Tanzu · Spring Cloud. In CISA KEV since 2022-08-25. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1505.003 Web Shell. Priority 69.9 of 100.kevpublic-exploitT1190T1059.007T1505.003https://patchfirst.co/cve/CVE-2018-4990/CVE-2018-4990#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 35.9% (higher than 98.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1204.002 Malicious File. Priority 63.9 of 100.kevT1059.007T1204.002https://patchfirst.co/cve/CVE-2018-19953/CVE-2018-19953#kevTue, 24 May 2022 00:00:00 GMTQNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.5% (higher than 98.2% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 71.9 of 100.kevransomwareT1189T1059.007https://patchfirst.co/cve/CVE-2018-19943/CVE-2018-19943#kevTue, 24 May 2022 00:00:00 GMTQNAP · Network Attached Storage (NAS). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 22.7% (higher than 97.7% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 71.3 of 100.kevransomwareT1189T1059.007https://patchfirst.co/cve/CVE-2019-18426/CVE-2019-18426#kevMon, 23 May 2022 00:00:00 GMTMeta Platforms · WhatsApp. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 67.9% (higher than 99.32% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1005 Data from Local System; T1059.007 JavaScript. Priority 78.6 of 100.kevpublic-exploitT1204.001T1005T1059.007https://patchfirst.co/cve/CVE-2016-0189/CVE-2016-0189#kevMon, 28 Mar 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-03-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.1% (higher than 99.85% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Named in 1 threat report. Priority 82.1 of 100.kevransomwarepublic-exploitT1189T1059.007https://patchfirst.co/cve/CVE-2015-2419/CVE-2015-2419#kevMon, 28 Mar 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 53.0% (higher than 99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1189 Drive-by Compromise. Named in 1 threat report. Priority 67.8 of 100.kevpublic-exploitT1059.007T1189https://patchfirst.co/cve/CVE-2015-5119/CVE-2015-5119#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1566.002 Spearphishing Link; T1105 Ingress Tool Transfer; T1055.001 Dynamic-link Library Injection; T1071.001 Web Protocols. Named in 5 threat reports. Priority 74.8 of 100.kevpublic-exploitT1059.007T1566.002T1105T1055.001T1071.001https://patchfirst.co/cve/CVE-2013-3346/CVE-2013-3346#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Reader and Acrobat. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 78.9% (higher than 99.59% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript. Priority 54.8 of 100.kevpublic-exploitT1059.007https://patchfirst.co/cve/CVE-2022-24682/CVE-2022-24682#kevFri, 25 Feb 2022 00:00:00 GMTSynacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.kevransomwarepublic-exploitT1204.001T1059.007T1185https://patchfirst.co/cve/CVE-2021-37975/CVE-2021-37975#kevWed, 03 Nov 2021 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 34.9% (higher than 98.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 68.8 of 100.kevpublic-exploitT1059.007T1203https://patchfirst.co/cve/CVE-2021-21148/CVE-2021-21148#kevWed, 03 Nov 2021 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 20.0% (higher than 97.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 68.6 of 100.kevpublic-exploitT1059.007T1203https://patchfirst.co/cve/CVE-2021-21166/CVE-2021-21166#kevWed, 03 Nov 2021 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 24.0% (higher than 97.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 63.7 of 100.kevT1059.007T1203https://patchfirst.co/cve/CVE-2021-21206/CVE-2021-21206#kevWed, 03 Nov 2021 00:00:00 GMTGoogle · Chromium Blink. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 63.2 of 100.kevT1059.007T1203https://patchfirst.co/cve/CVE-2021-30554/CVE-2021-30554#kevWed, 03 Nov 2021 00:00:00 GMTGoogle · Chromium WebGL. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 7.4% (higher than 94.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059.007 JavaScript; T1203 Exploitation for Client Execution. Priority 63.0 of 100.kevT1059.007T1203https://patchfirst.co/cve/CVE-2020-3137/CVE-2020-3137Wed, 23 Sep 2020 00:00:00 GMTCisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 0.8% (higher than 57.8% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.8 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-3349/CVE-2020-3349Thu, 16 Jul 2020 00:00:00 GMTCisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.3 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-3356/CVE-2020-3356Thu, 18 Jun 2020 00:00:00 GMTCisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.6 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-3233/CVE-2020-3233Wed, 03 Jun 2020 00:00:00 GMTCisco · Cisco IOx. Not in CISA KEV. EPSS 0.6% (higher than 50.3% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.5 of 100.T1059.007T1557https://patchfirst.co/cve/CVE-2020-11082/CVE-2020-11082Thu, 28 May 2020 00:00:00 GMTkaminari · Kaminari. Not in CISA KEV. EPSS 1.5% (higher than 75% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.5 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-11036/CVE-2020-11036Tue, 05 May 2020 00:00:00 GMTglpi-project · GLPI. Not in CISA KEV. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 7.6 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 16.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5336/CVE-2020-5336Mon, 04 May 2020 00:00:00 GMTDell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-11030/CVE-2020-11030Thu, 30 Apr 2020 00:00:00 GMTWordPress · WordPress. Not in CISA KEV. EPSS 1.4% (higher than 73.1% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.1 of 100.T1059.007T1557https://patchfirst.co/cve/CVE-2020-5270/CVE-2020-5270Mon, 20 Apr 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 57.6% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1005 Data from Local System; T1036 Masquerading; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.4 of 100.T1566.002T1005T1036T1059.007T1557https://patchfirst.co/cve/CVE-2020-5269/CVE-2020-5269Mon, 20 Apr 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-5271/CVE-2020-5271Mon, 20 Apr 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-5264/CVE-2020-5264Mon, 20 Apr 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 55.1% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.1 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-5266/CVE-2020-5266Thu, 16 Apr 2020 00:00:00 GMTPrestaShop · ps_linklist. Not in CISA KEV. EPSS 0.6% (higher than 50.5% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.2 of 100.T1189T1059.007T1557https://patchfirst.co/cve/CVE-2020-5339/CVE-2020-5339Wed, 25 Mar 2020 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5340/CVE-2020-5340Wed, 25 Mar 2020 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2019-18578/CVE-2019-18578Fri, 13 Mar 2020 00:00:00 GMTDell · XtremIO. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 19.6 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-3121/CVE-2020-3121Sun, 26 Jan 2020 00:00:00 GMTCisco · Cisco 550X Series Stackable Managed Switches. Not in CISA KEV. EPSS 1.1% (higher than 64.7% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2019-18571/CVE-2019-18571Wed, 18 Dec 2019 00:00:00 GMTDell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 0.5% (higher than 43% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 12.4 of 100.T1204.002T1059.007T1185https://patchfirst.co/cve/CVE-2019-15994/CVE-2019-15994Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco Stealthwatch Enterprise. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.1 of 100.T1204.001T1059.007T1557