{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1592 Gather Victim Host Information","home_page_url":"https://patchfirst.co/technique/T1592/","feed_url":"https://patchfirst.co/feed/technique/T1592.json","description":"New and newly exploited CVEs that lead to ATT&CK T1592 Gather Victim Host Information, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-47813#kev","url":"https://patchfirst.co/cve/CVE-2025-47813/","title":"[KEV] CVE-2025-47813: Wing FTP Server Information Disclosure Vulnerability","content_text":"Wing FTP Server · Wing FTP Server. In CISA KEV since 2026-03-16. ENISA EUVD lists it as exploited. EPSS 62.5% (higher than 99.19% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1592 Gather Victim Host Information. Priority 70.8 of 100.","summary":"Wing FTP Server Information Disclosure Vulnerability","date_published":"2026-03-16T00:00:00.000Z","date_modified":"2026-06-17T09:28:43.000Z","tags":["kev","public-exploit","T1190","T1592"],"_patchfirst":{"reason":"kev","priority":70.8,"kev":{"dateAdded":"2026-03-16","ransomware":false},"epss":{"score":0.62512,"percentile":0.99187},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Wing FTP Server","product":"Wing FTP Server","techniqueIds":["T1190","T1592"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-12637#kev","url":"https://patchfirst.co/cve/CVE-2017-12637/","title":"[KEV] CVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerability","content_text":"SAP · NetWeaver. In CISA KEV since 2025-03-19. ENISA EUVD lists it as exploited. EPSS 95.1% (higher than 99.86% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery; T1555 Credentials from Password Stores; T1592 Gather Victim Host Information. Priority 68.2 of 100.","summary":"SAP NetWeaver Directory Traversal Vulnerability","date_published":"2025-03-19T00:00:00.000Z","date_modified":"2026-06-17T01:03:42.000Z","tags":["kev","public-exploit","T1190","T1083","T1555","T1592"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2025-03-19","ransomware":false},"epss":{"score":0.95111,"percentile":0.99863},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SAP","product":"NetWeaver","techniqueIds":["T1190","T1083","T1555","T1592"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2015-5317#kev","url":"https://patchfirst.co/cve/CVE-2015-5317/","title":"[KEV] CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability","content_text":"Jenkins · Jenkins User Interface (UI). In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 23.0% (higher than 97.7% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1592 Gather Victim Host Information. Priority 62.8 of 100.","summary":"Jenkins User Interface (UI) Information Disclosure Vulnerability","date_published":"2023-05-12T00:00:00.000Z","date_modified":"2026-06-17T00:28:55.000Z","tags":["kev","T1190","T1592"],"_patchfirst":{"reason":"kev","priority":62.8,"kev":{"dateAdded":"2023-05-12","ransomware":false},"epss":{"score":0.23003,"percentile":0.97749},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Jenkins","product":"Jenkins User Interface (UI)","techniqueIds":["T1190","T1592"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2013-7331#kev","url":"https://patchfirst.co/cve/CVE-2013-7331/","title":"[KEV] CVE-2013-7331: Microsoft Internet Explorer Information Disclosure Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 50.2% (higher than 98.9% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1592 Gather Victim Host Information. Named in 2 threat reports. Priority 68.5 of 100.","summary":"Microsoft Internet Explorer Information Disclosure Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-06-17T00:01:46.000Z","tags":["kev","public-exploit","T1592"],"_patchfirst":{"reason":"kev","priority":68.5,"kev":{"dateAdded":"2022-05-25","ransomware":false},"epss":{"score":0.5021,"percentile":0.98905},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1592"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-0631#kev","url":"https://patchfirst.co/cve/CVE-2013-0631/","title":"[KEV] CVE-2013-0631: Adobe ColdFusion Information Disclosure Vulnerability","content_text":"Adobe · ColdFusion. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 66.4% (higher than 99.28% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1592 Gather Victim Host Information. Priority 63.1 of 100.","summary":"Adobe ColdFusion Information Disclosure Vulnerability","date_published":"2022-03-07T00:00:00.000Z","date_modified":"2026-06-16T23:49:47.000Z","tags":["kev","T1190","T1592"],"_patchfirst":{"reason":"kev","priority":63.1,"kev":{"dateAdded":"2022-03-07","ransomware":false},"epss":{"score":0.66413,"percentile":0.99281},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"ColdFusion","techniqueIds":["T1190","T1592"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}