Patchfirst
Patchfirst
T1565.001Impact

Stored Data Manipulation

Adversaries may insert, delete, or manipulate data at rest in order to influence external outcomes or hide activity, thus threatening the integrity of the data. By manipulating stored data, adversaries may attempt to affect a business process, organizational understanding, and decision making. Stored data could include a variety of file formats, such as Office files, databases, stored emails…

attack.mitre.org ↗
CVEs28
In 14
Reports1

Detections

6 Sigma rules tagged T1565.001
Stored Data ManipulationT1565.0016 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Stored Data Manipulation

28 CVEs, by priority. Each link shows its badge.
  1. CVE-2022-27593QNAP Photo Station Externally Controlled Reference Vulnerability
    QNAP · Photo StationKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    87.9%Top 0.24%
    79.3priority
  2. CVE-2022-27924Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
    Synacor · Zimbra Collaboration Suite (ZCS)KEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    93.9%Top 0.16%
    78.2priority
  3. CVE-2022-30333RARLAB UnRAR Directory Traversal Vulnerability
    RARLAB · UnRARKEVRansomwarePublic exploitHigh · 7.5T1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    99.2%Top 0.06%
    78.2priority
  4. CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability
    Fortinet · FortiMailKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    4.6%Top 8.4%
    78.2priority
  5. CVE-2026-20253Splunk Enterprise Missing Authentication for Critical Function Vulnerability
    Splunk · EnterpriseKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    96.9%Top 0.11%
    74.8priority
  6. CVE-2026-42208BerriAI LiteLLM SQL Injection Vulnerability
    BerriAI · LiteLLMKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    89.4%Top 0.21%
    74.8priority
  7. CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
    MikroTik · RouterOSKEVPublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    AI mapping from the description · primary impact
    2.3%Top 17%
    74.2priority
  8. CVE-2020-36193PEAR Archive_Tar Improper Link Resolution Vulnerability
    PEAR · Archive_TarKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    70.6%Top 0.61%
    73.1priority
  9. CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
    Cisco · Catalyst SD-WAN ManagerKEVPublic exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    29.1%Top 1.8%
    72.2priority
  10. CVE-2025-0108Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1055Process Injection+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    98.1%Top 0.09%
    69.4priority
  11. CVE-2024-8956PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
    PTZOptics · PT30X-SDI/NDI CamerasKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    AI mapping from the description · primary impact
    58.8%Top 0.9%
    69.2priority
  12. CVE-2019-2616Oracle BI Publisher Unauthorized Access Vulnerability
    Oracle · BI Publisher (Formerly XML Publisher)KEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1213Data from Information Repositories+1 more
    AI mapping from the description · primary impact
    92.2%Top 0.18%
    68.0priority
  13. CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
    Cisco · Catalyst SD-WAN MangerKEVMedium · 5.4T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    AI mapping from the description · primary impact
    25.8%Top 2%
    66.4priority
  14. CVE-2022-41328Fortinet FortiOS Path Traversal Vulnerability
    Fortinet · FortiOSKEVHigh · 7.1T1574Hijack Execution FlowT1037Boot or Logon Initialization Scripts+2 more · 1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    10.7%Top 4.2%
    66.0priority
  15. CVE-2019-15972Cisco Unified Communications Manager SQL Injection Vulnerability
    Cisco · Cisco Unified Communications ManagerPublic exploitMedium · 5.4T1078Valid AccountsT1133External Remote Services+3 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.6%Top 24%
    23.9priority
  16. CVE-2020-3440Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
    Cisco · Cisco Webex MeetingsMedium · 6.5T1566PhishingT1204.002Malicious File+1 more
    MITRE CTID mapping of the CVE · primary impact
    2.6%Top 15%
    23.0priority
  17. CVE-2019-1689Cisco Webex Teams for iOS Arbitrary File Upload Vulnerability
    Cisco · Cisco Webex TeamsHigh · 7.3T1105Ingress Tool TransferT1531Account Access Removal+1 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.6%Top 25%
    20.2priority
  18. CVE-2020-3309Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability
    Cisco · Cisco Firepower Threat Defense SoftwareMedium · 6.5T1133External Remote ServicesT1190Exploit Public-Facing Application+2 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.8%Top 22%
    20.2priority
  19. CVE-2019-1863Cisco Integrated Management Controller Privilege Escalation Vulnerability
    Cisco · Cisco Unified Computing System E-Series Software (UCSE)Medium · 6.5T1078Valid AccountsT1190Exploit Public-Facing Application+2 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.7%Top 23%
    20.0priority
  20. CVE-2018-5459An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X
    T1005Data from Local SystemT1485Data Destruction+1 more
    MITRE CTID mapping of the CVE · follow-on activity
    2.7%Top 14%
    17.2priority
  21. CVE-2020-11010SQL injection in Tortoise ORM
    tortoise · tortoise-ormMedium · 6.3T1133External Remote ServicesT1190Exploit Public-Facing Application+5 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.0%Top 36%
    17.2priority
  22. CVE-2019-1942Cisco Identity Services Engine Blind SQL Injection Vulnerability
    Cisco · Cisco Identity Services Engine SoftwareMedium · 4.3T1078Valid AccountsT1133External Remote Services+3 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.2%Top 31%
    16.8priority
  23. CVE-2019-18234Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely…
    T1133External Remote ServicesT1190Exploit Public-Facing Application+5 more
    MITRE CTID mapping of the CVE · follow-on activity
    1.9%Top 20%
    15.9priority
  24. CVE-2020-5345Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions…
    Dell · Unisphere for PowerMaxMedium · 6.4T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    MITRE CTID mapping of the CVE · how it is exploited
    0.7%Top 45%
    15.4priority
  25. CVE-2019-3786BBR could run arbitrary scripts on deployment VMs
    Cloud Foundry · BOSH Backup and RestoreHigh · 7.7T1005Data from Local SystemT1565.001Stored Data Manipulation
    MITRE CTID mapping of the CVE · how it is exploited
    0.6%Top 52%
    14.9priority
  26. CVE-2019-1836Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal…
    Cisco · Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI ModeMedium · 5.5T1133External Remote ServicesT1565.001Stored Data Manipulation
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 62%
    12.8priority
  27. CVE-2020-3237Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability
    Cisco · Cisco IOxMedium · 6.3T1133External Remote ServicesT1565.001Stored Data Manipulation
    MITRE CTID mapping of the CVE · primary impact
    0.4%Top 71%
    10.1priority
  28. CVE-2020-3476Cisco IOS XE Software Arbitrary File Overwrite Vulnerability
    Cisco · Cisco IOS XE SoftwareMedium · 4.4T1078Valid AccountsT1565.001Stored Data Manipulation
    MITRE CTID mapping of the CVE · primary impact
    0.3%Top 81%
    6.9priority

Passages that support these links

↑ ↓ chooseEnter openEsc close