https://patchfirst.co/technique/T1185/New and newly exploited CVEs that lead to ATT&CK T1185 Browser Session Hijacking, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2023-34192/CVE-2023-34192#kevTue, 25 Feb 2025 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-02-25. ENISA EUVD lists it as exploited. EPSS 77.3% (higher than 99.56% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 69.2 of 100.kevpublic-exploitT1055T1059T1185https://patchfirst.co/cve/CVE-2012-0767/CVE-2012-0767#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1185 Browser Session Hijacking; T1098 Account Manipulation; T1114.002 Remote Email Collection. Priority 46.0 of 100.kevT1204.001T1185T1098T1114.002https://patchfirst.co/cve/CVE-2017-0210/CVE-2017-0210#kevTue, 24 May 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-05-24. ENISA EUVD lists it as exploited. EPSS 22.3% (higher than 97.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1185 Browser Session Hijacking. Priority 48.7 of 100.kevT1189T1185https://patchfirst.co/cve/CVE-2022-24682/CVE-2022-24682#kevFri, 25 Feb 2022 00:00:00 GMTSynacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.kevransomwarepublic-exploitT1204.001T1059.007T1185https://patchfirst.co/cve/CVE-2020-15162/CVE-2020-15162Thu, 24 Sep 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.4% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 15.1 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-15183/CVE-2020-15183Thu, 17 Sep 2020 00:00:00 GMTinunosinsi · soycms. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). CVSS 8.4 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 21.4 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-15179/CVE-2020-15179Tue, 15 Sep 2020 00:00:00 GMTInternationalScratchWiki · wiki-scratchsig. Not in CISA KEV. EPSS 1.2% (higher than 68.6% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 19.3 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-3460/CVE-2020-3460Fri, 31 Jul 2020 00:00:00 GMTCisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.7% (higher than 53.7% of CVEs). CVSS 4.7 MEDIUM. ATT&CK: T1565.002 Transmitted Data Manipulation; T1185 Browser Session Hijacking. Priority 14.0 of 100.T1565.002T1185https://patchfirst.co/cve/CVE-2020-15118/CVE-2020-15118Mon, 20 Jul 2020 00:00:00 GMTwagtail · wagtail. Not in CISA KEV. EPSS 1.1% (higher than 65.7% of CVEs). CVSS 5.7 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 17.1 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-11083/CVE-2020-11083Tue, 14 Jul 2020 00:00:00 GMTOctober CMS · October. Not in CISA KEV. EPSS 1.1% (higher than 66.8% of CVEs). CVSS 3.5 LOW. Public exploit code exists. ATT&CK: T1185 Browser Session Hijacking. Priority 20.8 of 100.public-exploitT1185https://patchfirst.co/cve/CVE-2020-11055/CVE-2020-11055Thu, 07 May 2020 00:00:00 GMTBookStackApp · BookStack. Not in CISA KEV. EPSS 0.8% (higher than 56% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 15.6 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-11036/CVE-2020-11036Tue, 05 May 2020 00:00:00 GMTglpi-project · GLPI. Not in CISA KEV. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 7.6 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 16.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5283/CVE-2020-5283Fri, 03 Apr 2020 00:00:00 GMTviewvc · viewvc. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). CVSS 3.1 LOW. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 16.5 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-5339/CVE-2020-5339Wed, 25 Mar 2020 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5340/CVE-2020-5340Wed, 25 Mar 2020 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5267/CVE-2020-5267Thu, 19 Mar 2020 00:00:00 GMTrails · actionview. Not in CISA KEV. EPSS 1.5% (higher than 74.6% of CVEs). CVSS 4.0 MEDIUM. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 22.7 of 100.public-exploitT1059T1185https://patchfirst.co/cve/CVE-2019-18578/CVE-2019-18578Fri, 13 Mar 2020 00:00:00 GMTDell · XtremIO. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 19.6 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5241/CVE-2020-5241Wed, 12 Feb 2020 00:00:00 GMTmatestack · matestack-ui-core. Not in CISA KEV. EPSS 0.6% (higher than 50% of CVEs). CVSS 7.7 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 15.4 of 100.T1059T1185https://patchfirst.co/cve/CVE-2020-5217/CVE-2020-5217Thu, 23 Jan 2020 00:00:00 GMTTwitter · secure_headers. Not in CISA KEV. EPSS 1.8% (higher than 78.8% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 18.8 of 100.T1059T1185https://patchfirst.co/cve/CVE-2019-18571/CVE-2019-18571Wed, 18 Dec 2019 00:00:00 GMTDell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 0.5% (higher than 43% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 12.4 of 100.T1204.002T1059.007T1185https://patchfirst.co/cve/CVE-2019-3708/CVE-2019-3708Wed, 17 Apr 2019 00:00:00 GMTDell EMC · Dell EMC IsilonSD Management Server. Not in CISA KEV. EPSS 2.2% (higher than 82.9% of CVEs). CVSS 8.3 HIGH. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 22.4 of 100.T1204.001T1059.007T1185https://patchfirst.co/cve/CVE-2018-11075/CVE-2018-11075Fri, 28 Sep 2018 00:00:00 GMTRSA · Authentication Manager. Not in CISA KEV. EPSS 1.5% (higher than 74.1% of CVEs). CVSS 5.8 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 18.9 of 100.T1204.002T1059.007T1185https://patchfirst.co/cve/CVE-2018-11073/CVE-2018-11073Fri, 28 Sep 2018 00:00:00 GMTRSA · Authentication Manager. Not in CISA KEV. EPSS 1.1% (higher than 65.9% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 17.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2018-11059/CVE-2018-11059Tue, 24 Jul 2018 00:00:00 GMTDell EMC · RSA Archer. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 20.1 of 100.T1189T1059.007T1185