The U.S. Cybersecurity and Infrastructure Security Agency has updated its list of known exploited vulnerabilities with 15 new security issues that serve as a frequent attack vector against federal enterprises. The latest additions vary in terms of severity and disclosure date, some of them being rated as medium risks while others are as old as 2013. CISA compiled the new list after finding evidence that the security issues newly added to the Catalog of Known Exploited Vulnerabilities are used in ongoing attacks. The list is part of the Binding Operational Directive (BOD) 22-01 for reducing security risks.”]