What CISA Binding Operational Directive 22-01 - Known Exploited Vulnerabilities Catalog: Federal Agency Mandatory Patch Deadlines (14-Day Critical, 30-Day High), KEV Catalog Methodology, Vendor Coordination, Private Sector Voluntary Adoption and Metrics Reporting requires
Federal civilian executive branch agencies must remediate vulnerabilities listed in the CISA Known Exploited Vulnerabilities (KEV) Catalog within 14 days for critical severity and 30 days for high severity per Binding Operational Directive (BOD) 22-01. This directive mandates patching timelines, reporting, and coordination with CISA for exploited vulnerabilities actively used in the wild.
Pillar: Cybersecurity · Authority: Cybersecurity and Infrastructure Security Agency (CISA) · Version: 1.0.1 · Last updated:
Primary source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
SHA-256 integrity: 0d6d23bae450cb6ea47acc8b940f6e64299e43baf9b3a6636756e0cdef358342
Primary Citations — 5 traced to source
- CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog, Entry for CVE-2024-1708, 2024
- CISA Binding Operational Directive 22-01, https://www.cisa.gov/known-exploited-vulnerabilities-catalog, Section on Remediation Deadlines, 2022
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-cisa-known-exploited-vulnerabilities-bod-22-01.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-cisa-known-exploited-vulnerabilities-bod-22-01.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-cisa-known-exploited-vulnerabilities-bod-22-01
- Back to registry: Browse all 10,090 compliance nodes