CISA records

11 published records for vendor cisa.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 45.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-7243No exploit	Ethercat Zeek Plugin Out-of-bounds Writecisa · icsnpp-ethercat · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Mar 1, 2024
39Monitor	CVE-2023-7244No exploit	Ethercat Zeek Plugin Out-of-bounds Writecisa · icsnpp-ethercat · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Mar 1, 2024
32Monitor	CVE-2023-7242No exploit	Ethercat Zeek Plugin Out-of-bounds Readcisa · icsnpp-ethercat · CWE-125 Pre-auth Memory safety	High8.2	—	0.5%	Mar 1, 2024
27Monitor	CVE-2025-35432No exploit	CISA Thorium does not rate limit account verification email messagescisa · thorium · CWE-400 Pre-auth Denial of service	Medium6.9	—	0.6%	Sep 17, 2025
27Monitor	CVE-2025-35436No exploit	CISA Thorium account verification email error handlingcisa · thorium · CWE-248 Pre-auth	Medium6.9	—	0.6%	Sep 17, 2025
21Monitor	CVE-2025-35430No exploit	CISA Thorium insecure downloaded file path validationcisa · thorium · CWE-22 Path traversal	Medium5.3	—	0.5%	Sep 17, 2025
21Monitor	CVE-2025-35435No exploit	CISA Thorium download stream divide by zerocisa · thorium · CWE-369	Medium5.3	—	0.4%	Sep 17, 2025
21Monitor	CVE-2025-35431No exploit	CISA Thorium LDAP injectioncisa · thorium · CWE-90	Medium5.3	—	0.3%	Sep 17, 2025
18Monitor	CVE-2025-67634No exploit	Software Acquisition Guide Supplier Response Web Tool XSScisa · software acquisition guide · CWE-79 XSS	Medium4.6	—	0.2%	Dec 12, 2025
9Monitor	CVE-2025-35433No exploit	CISA Thorium does not properly invalidate previously used tokenscisa · thorium · CWE-613	Low2.3	—	0.3%	Sep 17, 2025
9Monitor	CVE-2025-35434No exploit	CISA Thorium does not validate TLS connections to Elasticsearchcisa · thorium · CWE-295 Pre-auth Weak crypto	Low2.3	—	0.2%	Sep 17, 2025

CVE-2023-7243
39Monitor
Ethercat Zeek Plugin Out-of-bounds Write
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
cisa · icsnpp-ethercatMar 1, 2024
CVE-2023-7244
39Monitor
Ethercat Zeek Plugin Out-of-bounds Write
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
cisa · icsnpp-ethercatMar 1, 2024
CVE-2023-7242
32Monitor
Ethercat Zeek Plugin Out-of-bounds Read
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
cisa · icsnpp-ethercatMar 1, 2024
CVE-2025-35432
27Monitor
CISA Thorium does not rate limit account verification email messages
MediumCVSS 6.9No exploitEPSS 1%
- Pre-auth
- Denial of service
cisa · thoriumSep 17, 2025
CVE-2025-35436
27Monitor
CISA Thorium account verification email error handling
MediumCVSS 6.9No exploitEPSS 1%
- Pre-auth
cisa · thoriumSep 17, 2025
CVE-2025-35430
21Monitor
CISA Thorium insecure downloaded file path validation
MediumCVSS 5.3No exploitEPSS 0%
- Path traversal
cisa · thoriumSep 17, 2025
CVE-2025-35435
21Monitor
CISA Thorium download stream divide by zero
MediumCVSS 5.3No exploitEPSS 0%
cisa · thoriumSep 17, 2025
CVE-2025-35431
21Monitor
CISA Thorium LDAP injection
MediumCVSS 5.3No exploitEPSS 0%
cisa · thoriumSep 17, 2025
CVE-2025-67634
18Monitor
Software Acquisition Guide Supplier Response Web Tool XSS
MediumCVSS 4.6No exploitEPSS 0%
- XSS
cisa · software acquisition guideDec 12, 2025
CVE-2025-35433
9Monitor
CISA Thorium does not properly invalidate previously used tokens
LowCVSS 2.3No exploitEPSS 0%
cisa · thoriumSep 17, 2025
CVE-2025-35434
9Monitor
CISA Thorium does not validate TLS connections to Elasticsearch
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
cisa · thoriumSep 17, 2025