Skip to content
COOEY
COMMAND_CENTER
SYNC 2026-08-12 00:00 · LIVE EXECUTIVE SUMMARY
FedRAMP authorized
309
73% of 424 tracked
In process
95
in FedRAMP assessment
Ready
20
FedRAMP Ready designation
Exposed products
80
4657 correlated CVE links
Under active attack
852
tracked CVEs on CISA KEV
Providers
342
FedRAMP vendors tracked
THREAT_LEVEL
Global threat level · band 5/5
SEVERE
LOW
GUARDED
ELEVATED
HIGH
SEVERE
Derived from 252 critical CVEs correlated to tracked products — band 5 spans 40+.
What’s driving it → priority exposures
COMPLIANCE RADAR · CMMCdomains →
ACATAUCMIAIRMAMPPSPERACASCSI
PRODUCTS CLASSIFIED 424/424800-171 families
PRIORITY EXPOSURES · DEFENDER CARDSVIEW_ALL 80 →
CVE-2012-0518 Exploited 2022-03-28

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity...

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#exploited-in-wild
CVE-2012-1723 Exploited RCE 2022-03-03

A critical, actively exploited Java vulnerability allows remote code execution, impacting systems using outdated Java SE Runtime Environments (JRE).

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#ransomware#rce#exploited-in-wild#unpatched
CVE-2012-0507 Exploited RCE 2022-03-03

Oracle Java SE's Concurrency component had a remotely exploitable arbitrary code execution vulnerability, actively targeted by ransomware actors,...

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#ransomware#rce#exploited-in-wild#unpatched
CVE-2008-3431 Exploited RCE 2022-03-03

An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#rce#exploited-in-wild
CVE-2011-3544 Exploited RCE 2022-03-03

An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely...

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#rce#exploited-in-wild
CVE-2012-1710 Exploited 2022-05-25

Oracle Fusion Middleware's WebCenter Forms Recognition component suffered an unspecified vulnerability allowing remote attackers to compromise...

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#ransomware#exploited-in-wild#unpatched
CVE-2010-0840 Exploited RCE 2022-05-25

An unspecified vulnerability in Oracle's Java Runtime Environment (JRE) was actively exploited in the wild, affecting confidentiality, integrity, and availability.

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#exploited-in-wild#unpatched
CVE-2012-3152 Exploited 2021-11-03

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of...

AFFECTS 10 Aconex for DefenseFederal Managed Cloud ServicesFusion CloudGovernment Cloud - Common Controls +6
▸ BLUE TEAM

Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

Confirm which of your 10 affected products are internet-exposed and in CUI scope — CISA KEV, so remediate ahead of your normal cycle.

#exploited-in-wild
MOST-EXPOSED VENDORSall vendors →
VENDOREXPOSED CVEs
Microsoft440products →
Cisco Systems Inc.103products →
Duo Security (A Cisco Company)103products →
Google98products →
AppDynamics (a Cisco company)97products →
Adobe89products →
Oracle49products →
Ivanti41products →
VMware, Inc.33products →
IBM30products →
LATEST INTELLIGENCE
full feed →
2026-08-11 NVD CVE CVE-2026-44758: SAP Manufacturing Integration and Intelligence (MII) allows an attacker with hig
2026-08-11 NVD CVE CVE-2026-58231: SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authent
2026-08-11 CISA advisory Mira Hormone Monitor, Mira Android App ↗
2026-08-11 NVD CVE CVE-2026-34265: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to expl
2026-08-11 NVD CVE CVE-2026-19425: Travel Agency Management System developed by Win Men Intermational has a SQL Inj
2026-08-11 NVD CVE CVE-2026-10579: A flaw was found in Picketlink Federation SAML; the unsolcited response handler
2026-08-11 NVD CVE CVE-2026-65791: Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorize
2026-08-11 CISA advisory Pulsetto Vagus Nerve Stimulator ↗
≣Live feedEvery collected event — vulns, rulemaking, advisories, news. ▤FedRAMP catalogAuthorized products, impact levels and status timelines. ◧By CMMC domainBrowse products by the 14 CMMC / 800-171 domains they help satisfy. ⚠ExposuresActively-exploited & critical CVEs mapped to your products. §RegulatoryCMMC / DFARS rulemaking — eCFR + Federal Register.