Weakness / #53
CWE-917 in CISA KEV
Answer 5 KEV entries list CWE-917 as of catalog 2026.09.23, 0.3% of the catalog and rank 53 of 185 weaknesses. The most affected vendor is Apache (2).
- KEV entries
- 50.3% of catalog
- Vendors
- 3affected
- Ransomware: known
- 360%
- First added
- 2021-11-03
- Latest added
- 2023-05-01
VVendors
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 3 |
| 2022 | 1 |
| 2023 | 1 |
| 2024 | 0 |
| 2025 | 0 |
| 2026 | 0 |
PProducts
| Product | Entries | Share |
|---|---|---|
| Apache Log4j2 | 1 | 20% |
| Atlassian Confluence Server/Data Center | 1 | 20% |
| Atlassian Confluence Server and Data Center | 1 | 20% |
| Apache Struts | 1 | 20% |
| Sonatype Nexus Repository | 1 | 20% |
EAll entries
| CVE | Vendor | Product | Added | Ransomware |
|---|---|---|---|---|
| CVE-2021-45046 | Apache | Log4j2 | Known | |
| CVE-2022-26134 | Atlassian | Confluence Server/Data Center | Known | |
| CVE-2021-26084 | Atlassian | Confluence Server and Data Center | Known | |
| CVE-2020-17530 | Apache | Struts | Unknown | |
| CVE-2020-10199 | Sonatype | Nexus Repository | Unknown |
Cite this
5 CISA KEV entries list CWE-917, 0.3% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-917/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.