Skip to content
50FiftyPage

Glossary: Security Fundamentals

KEV (Known Exploited Vulnerabilities)

Also written: KEV, KEV catalog, kev.json

CISA's catalog of vulnerabilities attackers are actually using, published as a JSON file. Alex's rank.sh puts KEV findings first, which is why the firewall's 7.5 beats the server's 8.1.

Where the book teaches it

Related terms

PrioritizationCISA (Cybersecurity and Infrastructure Security Agency)CVE (Common Vulnerabilities and Exposures)EPSS (Exploit Prediction Scoring System)