CVE Vendors
Vendors ranked by risk — CVE counts, exploit rates, CVSS averages, and KEV exposure
| # | Vendor | CVEs | CVSS | Crit | High | KEV | Exploit% | Post-Patch% | →Patch | →Exploit | Risk |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Amq Broker | 64 | 7.6 | 3 | 56 | ● 1 | 4.7% | 0.0% | 9 | — | HIGH |
| 2 | Jboss Fuse | 54 | 7.7 | 3 | 47 | ● 1 | 3.7% | 0.0% | 9 | — | HIGH |
| 3 | Jboss Enterprise Application Platform | 45 | 7.7 | 3 | 38 | ● 1 | 4.4% | 0.0% | 9 | — | HIGH |
| 4 | Openshift Devspaces | 53 | 7.7 | 3 | 46 | — | 1.9% | 0.0% | 9 | — | ELEVATED |
| 5 | Red Hat Single Sign On | 35 | 7.8 | 3 | 29 | — | 0.0% | 0.0% | 9 | — | ELEVATED |
| 6 | Jboss Enterprise Bpms Platform | 28 | 7.7 | 3 | 22 | — | 0.0% | 0.0% | 14 | — | ELEVATED |
| 7 | Amq Clients | 20 | 7.7 | 3 | 15 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 8 | Jboss Data Grid | 52 | 7.6 | 2 | 46 | ● 1 | 5.8% | 0.0% | 14 | — | HIGH |
| 9 | Enterprise Linux | 44 | 7.8 | 2 | 39 | ● 1 | 4.5% | 0.0% | 4 | — | HIGH |
| 10 | Satellite | 43 | 7.6 | 2 | 37 | — | 2.3% | 0.0% | 9 | — | ELEVATED |
| 11 | Apache Camel Spring Boot | 21 | 7.5 | 2 | 16 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 12 | Optaplanner | 16 | 7.7 | 2 | 13 | — | 0.0% | 0.0% | 14 | — | ELEVATED |
| 13 | Apache Software Foundation | 8 | 7.5 | 1 | 6 | ● 1 | 12.5% | 0.0% | — | — | HIGH |
| 14 | Cryostat | 47 | 7.6 | 1 | 42 | — | 4.3% | 0.0% | 4 | — | ELEVATED |
| 15 | Apache Camel Hawtio | 39 | 7.8 | 1 | 37 | — | 5.1% | 0.0% | 4 | — | ELEVATED |
| 16 | Apicurio Registry | 33 | 7.6 | 1 | 29 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 17 | Amq Streams | 30 | 7.4 | 1 | 25 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 18 | Debezium | 25 | 7.3 | 1 | 20 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 19 | Quarkus | 22 | 7.5 | 1 | 18 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 20 | Camel Spring Boot | 21 | 7.5 | 1 | 18 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 21 | Camel Quarkus | 21 | 7.4 | 1 | 17 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 22 | Build Keycloak | 21 | 7.7 | 1 | 19 | — | 4.8% | 0.0% | — | — | ELEVATED |
| 23 | Apache Camel Quarkus | 15 | 7.6 | 1 | 12 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 24 | Openshift Ai | 7 | 7.3 | 1 | 5 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 25 | Legion of the Bouncy Castle Inc. | 4 | 7.5 | 1 | 1 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 26 | Spring | 4 | 8.1 | 1 | 3 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 27 | Enterprise Linux Ai | 32 | 7.5 | 0 | 30 | — | 6.2% | 0.0% | 4 | — | — |
| 28 | Openshift | 29 | 7.7 | 0 | 28 | — | 6.9% | 0.0% | 4 | — | — |
| 29 | Rhdh | 28 | 7.7 | 0 | 27 | — | 7.1% | 0.0% | 4 | — | — |
| 30 | Openshift Pipelines | 25 | 7.7 | 0 | 24 | — | 8.0% | 0.0% | 4 | — | — |
| 31 | Ansible Automation Platform | 24 | 7.7 | 0 | 23 | — | 8.3% | 0.0% | 4 | — | — |
| 32 | Quay | 23 | 7.8 | 0 | 23 | — | 8.7% | 0.0% | 4 | — | — |
| 33 | Podman Desktop | 21 | 7.7 | 0 | 20 | — | 9.5% | 0.0% | — | — | — |
| 34 | Ansible Portal | 21 | 7.7 | 0 | 20 | — | 9.5% | 0.0% | — | — | — |
| 35 | Serverless | 20 | 7.5 | 0 | 19 | — | 0.0% | 0.0% | 4 | — | — |
| 36 | Acm | 20 | 7.8 | 0 | 19 | — | 0.0% | 0.0% | 4 | — | — |
| 37 | Trusted Artifact Signer | 19 | 7.9 | 0 | 19 | — | 5.3% | 0.0% | 4 | — | — |
| 38 | Rhmt | 19 | 7.7 | 0 | 18 | — | 10.5% | 0.0% | 4 | — | — |
| 39 | Network Observ Optr | 18 | 7.8 | 0 | 18 | — | 0.0% | 0.0% | 4 | — | — |
| 40 | Service Mesh | 18 | 7.7 | 0 | 17 | — | 11.1% | 0.0% | — | — | — |
| 41 | Red Hat 3Scale Amp | 17 | 7.9 | 0 | 17 | — | 0.0% | 0.0% | 4 | — | — |
| 42 | Container Native Virtualization | 17 | 7.8 | 0 | 17 | — | 11.8% | 0.0% | — | — | — |
| 43 | Service Registry | 16 | 7.4 | 0 | 15 | — | 0.0% | 0.0% | — | — | — |
| 44 | Discovery | 15 | 7.8 | 0 | 15 | — | 13.3% | 0.0% | — | — | — |
| 45 | Openshift Data Foundation | 15 | 7.7 | 0 | 15 | — | 0.0% | 0.0% | 4 | — | — |
| 46 | Migration Toolkit Applications | 14 | 7.7 | 0 | 14 | — | 0.0% | 0.0% | — | — | — |
| 47 | Advanced Cluster Security | 13 | 7.9 | 0 | 13 | — | 0.0% | 0.0% | — | — | — |
| 48 | Netty | 13 | 7.3 | 0 | 12 | — | 0.0% | 0.0% | — | — | — |
| 49 | Gatekeeper | 13 | 7.7 | 0 | 13 | — | 7.7% | 0.0% | — | — | — |
| 50 | Logging | 11 | 7.9 | 0 | 11 | — | 0.0% | 0.0% | 4 | — | — |
| 51 | Trusted Profile Analyzer | 10 | 7.9 | 0 | 10 | — | 0.0% | 0.0% | — | — | — |
| 52 | Cluster Observability Operator | 10 | 7.8 | 0 | 10 | — | 20.0% | 0.0% | — | — | — |
| 53 | Hummingbird | 9 | 7.5 | 0 | 8 | — | 0.0% | 0.0% | — | — | — |
| 54 | Workload Availability Nhc | 9 | 7.8 | 0 | 9 | — | 22.2% | 0.0% | 4 | — | — |
| 55 | Offline Knowledge Portal | 9 | 7.1 | 0 | 8 | — | 0.0% | 0.0% | — | — | — |
| 56 | Multicluster Engine | 8 | 7.8 | 0 | 8 | — | 0.0% | 0.0% | — | — | — |
| 57 | Axios | 8 | 7.8 | 0 | 8 | — | 0.0% | 0.0% | — | — | — |
| 58 | Connectivity Link | 7 | 7.6 | 0 | 7 | — | 0.0% | 0.0% | 4 | — | — |
| 59 | Confidential Compute Attestation | 7 | 7.3 | 0 | 6 | — | 0.0% | 0.0% | 4 | — | — |
| 60 | Openshift Gitops | 6 | 7.8 | 0 | 6 | — | 0.0% | 0.0% | 4 | — | — |
| 61 | Edge Manager | 6 | 7.5 | 0 | 6 | — | 0.0% | 0.0% | — | — | — |
| 62 | Jboss Enterprise Web Server | 5 | 7.6 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 63 | Enterprise Linux Eus | 4 | 7.2 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 64 | Openshift Distributed Tracing | 3 | 7.9 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 65 | Io.Netty | 3 | 7.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 66 | Jboss Enterprise Application Platform Eus | 3 | 8.0 | 0 | 3 | — | 0.0% | 0.0% | 14 | — | — |
| 67 | Directory Server | 3 | 8.0 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 68 | Undici | 3 | 7.5 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 69 | Isaacs | 3 | 8.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 70 | Lightspeed For Runtimes | 3 | 7.6 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |