Skip to content

Glossary: Vulnerability Management and Monitoring

KEV

Also written: Known Exploited Vulnerabilities, KEV catalog

CISA's Known Exploited Vulnerabilities catalog, which lists flaws attackers are using now. A KEV listing can put a lower-scored flaw, like Kettle & Crane's VPN gateway flaw, ahead of higher-scored ones.

Where the book teaches it

Related terms

CISAEPSSBinding Operational Directive 22-01severity assessment