Glossary: Vulnerability Management and Monitoring
KEV
Also written: Known Exploited Vulnerabilities, KEV catalog
CISA's Known Exploited Vulnerabilities catalog, which lists flaws attackers are using now. A KEV listing can put a lower-scored flaw, like Kettle & Crane's VPN gateway flaw, ahead of higher-scored ones.
Where the book teaches it
Related terms
CISAEPSSBinding Operational Directive 22-01severity assessment