CVE Vendors
Vendors ranked by risk — CVE counts, exploit rates, CVSS averages, and KEV exposure
| # | Vendor | CVEs | CVSS | Crit | High | KEV | Exploit% | Post-Patch% | →Patch | →Exploit | Risk |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Enterprise Linux | 810 | 7.5 | 30 | 664 | ● 2 | 5.7% | 1.2% | 11 | 2 | HIGH |
| 2 | Enterprise Linux Ai | 143 | 7.8 | 12 | 119 | — | 7.7% | 0.7% | 0 | 5 | ELEVATED |
| 3 | Rhel Eus | 309 | 7.7 | 11 | 281 | ● 1 | 8.1% | 1.6% | 14 | 10 | HIGH |
| 4 | Enterprise Linux Eus | 282 | 7.6 | 11 | 253 | ● 1 | 8.5% | 1.4% | 14 | 12 | HIGH |
| 5 | Hummingbird | 203 | 7.3 | 11 | 140 | — | 7.4% | 3.0% | 11 | 2 | ELEVATED |
| 6 | Openshift | 221 | 7.4 | 10 | 166 | ● 1 | 9.0% | 1.4% | 13 | 2 | HIGH |
| 7 | Rhel E4S | 279 | 7.7 | 9 | 254 | ● 1 | 7.5% | 1.4% | 12 | 6 | HIGH |
| 8 | Ai Inference Server | 89 | 7.7 | 9 | 70 | — | 5.6% | 2.2% | 5 | 3 | ELEVATED |
| 9 | Rhel Tus | 248 | 7.7 | 8 | 226 | ● 1 | 6.0% | 0.8% | 13 | 6 | HIGH |
| 10 | Rhel Aus | 243 | 7.7 | 8 | 222 | ● 1 | 5.3% | 0.4% | 12 | 10 | HIGH |
| 11 | Rhel Eus Long Life | 238 | 7.7 | 8 | 217 | ● 1 | 5.9% | 0.8% | 12 | 6 | HIGH |
| 12 | Rhel Els | 200 | 7.8 | 7 | 190 | — | 3.0% | 0.5% | 11 | 10 | ELEVATED |
| 13 | Red Hat | 160 | 6.7 | 6 | 82 | — | 2.5% | 2.5% | 3 | 13 | ELEVATED |
| 14 | Openshift Devspaces | 101 | 7.6 | 6 | 84 | — | 5.0% | 1.0% | 4 | 1 | ELEVATED |
| 15 | Cryostat | 100 | 7.7 | 5 | 87 | — | 5.0% | 0.0% | 4 | — | ELEVATED |
| 16 | Ansible Automation Platform | 88 | 7.7 | 5 | 74 | — | 8.0% | 0.0% | 2 | — | ELEVATED |
| 17 | Service Mesh | 68 | 7.7 | 5 | 57 | — | 11.8% | 0.0% | 0 | — | ELEVATED |
| 18 | Openshift Ai | 61 | 7.8 | 5 | 49 | — | 6.6% | 0.0% | — | — | ELEVATED |
| 19 | Jboss Enterprise Bpms Platform | 53 | 7.8 | 5 | 41 | — | 1.9% | 0.0% | — | — | ELEVATED |
| 20 | Jboss Fuse | 82 | 7.8 | 4 | 71 | ● 1 | 3.7% | 0.0% | 4 | — | HIGH |
| 21 | Jboss Data Grid | 78 | 7.7 | 4 | 66 | ● 1 | 5.1% | 0.0% | 13 | — | HIGH |
| 22 | Satellite | 94 | 7.6 | 4 | 78 | — | 7.4% | 0.0% | 1 | — | ELEVATED |
| 23 | Rhdh | 78 | 7.8 | 4 | 68 | — | 7.7% | 0.0% | 4 | — | ELEVATED |
| 24 | Openshift Pipelines | 72 | 7.7 | 4 | 61 | — | 8.3% | 0.0% | 7 | — | ELEVATED |
| 25 | Jboss Enterprise Application Platform | 59 | 7.8 | 3 | 51 | ● 1 | 5.1% | 0.0% | 4 | — | HIGH |
| 26 | Quay | 82 | 7.7 | 3 | 73 | — | 8.5% | 0.0% | 4 | — | ELEVATED |
| 27 | Acm | 82 | 7.7 | 3 | 71 | — | 6.1% | 1.2% | 22 | 2 | ELEVATED |
| 28 | Discovery | 67 | 7.4 | 3 | 49 | — | 9.0% | 4.5% | 15 | 2 | ELEVATED |
| 29 | Ansible Portal | 53 | 7.9 | 3 | 46 | — | 5.7% | 0.0% | 0 | — | ELEVATED |
| 30 | Container Native Virtualization | 53 | 7.8 | 3 | 46 | — | 9.4% | 0.0% | — | — | ELEVATED |
| 31 | Logging | 51 | 7.9 | 3 | 47 | — | 7.8% | 0.0% | 27 | — | ELEVATED |
| 32 | Rhui | 50 | 7.2 | 3 | 36 | — | 10.0% | 6.0% | 6 | 2 | ELEVATED |
| 33 | Migration Toolkit Applications | 47 | 7.6 | 3 | 37 | — | 8.5% | 0.0% | 0 | — | ELEVATED |
| 34 | Podman Desktop | 45 | 7.8 | 3 | 39 | — | 6.7% | 0.0% | — | — | ELEVATED |
| 35 | Apicurio Registry | 43 | 7.7 | 3 | 34 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 36 | MariaDB | 7 | 8.1 | 3 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 37 | Amq Broker | 56 | 7.7 | 2 | 50 | ● 1 | 5.4% | 0.0% | 4 | — | HIGH |
| 38 | Trusted Artifact Signer | 77 | 7.7 | 2 | 68 | — | 7.8% | 0.0% | 4 | — | ELEVATED |
| 39 | Apache Camel Hawtio | 61 | 7.7 | 2 | 54 | — | 4.9% | 0.0% | 4 | — | ELEVATED |
| 40 | Amq Streams | 57 | 7.6 | 2 | 48 | — | 5.3% | 0.0% | — | — | ELEVATED |
| 41 | Advanced Cluster Security | 53 | 7.7 | 2 | 46 | — | 7.5% | 0.0% | — | — | ELEVATED |
| 42 | Red Hat 3Scale Amp | 51 | 7.8 | 2 | 44 | — | 7.8% | 0.0% | 9 | — | ELEVATED |
| 43 | Openshift Data Foundation | 50 | 7.8 | 2 | 46 | — | 12.0% | 2.0% | 13 | 2 | ELEVATED |
| 44 | Rhmt | 49 | 7.7 | 2 | 42 | — | 12.2% | 0.0% | 4 | — | ELEVATED |
| 45 | Network Observ Optr | 47 | 7.7 | 2 | 41 | — | 8.5% | 0.0% | 4 | — | ELEVATED |
| 46 | Red Hat Single Sign On | 42 | 7.8 | 2 | 36 | — | 2.4% | 0.0% | 4 | — | ELEVATED |
| 47 | Openshift Gitops | 41 | 7.8 | 2 | 36 | — | 12.2% | 0.0% | 4 | — | ELEVATED |
| 48 | Gatekeeper | 37 | 7.7 | 2 | 31 | — | 10.8% | 0.0% | — | — | ELEVATED |
| 49 | Openshift Distributed Tracing | 30 | 7.6 | 2 | 24 | — | 10.0% | 0.0% | 30 | — | ELEVATED |
| 50 | Trusted Profile Analyzer | 28 | 7.8 | 2 | 21 | — | 7.1% | 0.0% | — | — | ELEVATED |
| 51 | Multicluster Engine | 27 | 7.7 | 2 | 21 | — | 7.4% | 0.0% | — | — | ELEVATED |
| 52 | Amq Clients | 23 | 7.7 | 2 | 19 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 53 | Connectivity Link | 23 | 7.8 | 2 | 19 | — | 13.0% | 0.0% | 4 | — | ELEVATED |
| 54 | Multicluster Globalhub | 20 | 7.9 | 2 | 18 | — | 5.0% | 0.0% | 207 | — | ELEVATED |
| 55 | Migration Toolkit Virtualization | 16 | 7.7 | 2 | 11 | — | 18.8% | 0.0% | 0 | — | ELEVATED |
| 56 | Insights Proxy | 16 | 7.4 | 2 | 10 | — | 31.2% | 25.0% | 12 | 2 | ELEVATED |
| 57 | Service Interconnect | 13 | 8.0 | 2 | 11 | — | 23.1% | 7.7% | 21 | 1 | ELEVATED |
| 58 | Vllm-Project | 11 | 7.6 | 2 | 6 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 59 | Rhosemc | 9 | 6.7 | 2 | 4 | — | 0.0% | 0.0% | 9 | — | ELEVATED |
| 60 | Kueue Operator | 5 | 7.9 | 2 | 2 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 61 | Chroma | 4 | 9.2 | 2 | 2 | — | 25.0% | 0.0% | — | — | ELEVATED |
| 62 | Apache Software Foundation | 23 | 7.8 | 1 | 22 | ● 1 | 17.4% | 0.0% | — | — | HIGH |
| 63 | Serverless | 43 | 7.7 | 1 | 41 | — | 4.7% | 0.0% | 4 | — | ELEVATED |
| 64 | Service Registry | 36 | 7.5 | 1 | 30 | — | 2.8% | 0.0% | — | — | ELEVATED |
| 65 | Openstack | 33 | 7.7 | 1 | 31 | — | 15.2% | 3.0% | 7 | 13 | ELEVATED |
| 66 | Edge Manager | 32 | 7.7 | 1 | 29 | — | 12.5% | 0.0% | — | — | ELEVATED |
| 67 | Ceph Storage | 32 | 7.4 | 1 | 25 | — | 12.5% | 0.0% | 54 | — | ELEVATED |
| 68 | Confidential Compute Attestation | 32 | 7.7 | 1 | 29 | — | 9.4% | 0.0% | 4 | — | ELEVATED |
| 69 | Cluster Observability Operator | 30 | 7.7 | 1 | 26 | — | 10.0% | 0.0% | — | — | ELEVATED |
| 70 | Camel Quarkus | 24 | 7.6 | 1 | 20 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 71 | Quarkus | 24 | 7.6 | 1 | 20 | — | 0.0% | 0.0% | 21 | — | ELEVATED |
| 72 | Debezium | 23 | 7.6 | 1 | 19 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 73 | Build Keycloak | 23 | 7.7 | 1 | 20 | — | 4.3% | 0.0% | — | — | ELEVATED |
| 74 | External Secrets Operator | 22 | 7.8 | 1 | 21 | — | 9.1% | 0.0% | — | — | ELEVATED |
| 75 | Camel Spring Boot | 21 | 7.9 | 1 | 19 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 76 | Assisted Installer | 21 | 7.8 | 1 | 20 | — | 9.5% | 0.0% | — | — | ELEVATED |
| 77 | Openshift Api Data Protection | 21 | 7.8 | 1 | 20 | — | 9.5% | 0.0% | — | — | ELEVATED |
| 78 | Zero Trust Workload Identity Manager | 21 | 7.7 | 1 | 19 | — | 9.5% | 0.0% | — | — | ELEVATED |
| 79 | Apache Camel Spring Boot | 21 | 7.5 | 1 | 17 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 80 | FreeRDP | 19 | 8.1 | 1 | 18 | — | 0.0% | 0.0% | 34 | — | ELEVATED |
| 81 | ImageMagick | 18 | 7.7 | 1 | 17 | — | 5.6% | 0.0% | — | — | ELEVATED |
| 82 | Cert Manager | 18 | 7.8 | 1 | 17 | — | 11.1% | 0.0% | — | — | ELEVATED |
| 83 | Openshift Builds | 17 | 7.8 | 1 | 16 | — | 11.8% | 0.0% | — | — | ELEVATED |
| 84 | Openshift Security Profiles Operator | 17 | 7.8 | 1 | 16 | — | 11.8% | 0.0% | — | — | ELEVATED |
| 85 | Apache Camel Quarkus | 16 | 7.8 | 1 | 13 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 86 | Optaplanner | 16 | 7.5 | 1 | 13 | — | 6.2% | 0.0% | — | — | ELEVATED |
| 87 | Axios | 16 | 7.6 | 1 | 13 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 88 | Openshift Custom Metrics Autoscaler | 15 | 7.8 | 1 | 14 | — | 13.3% | 0.0% | — | — | ELEVATED |
| 89 | Stf | 15 | 7.6 | 1 | 13 | — | 20.0% | 0.0% | 0 | — | ELEVATED |
| 90 | Openshift Cluster Manager Cli | 14 | 7.8 | 1 | 13 | — | 14.3% | 0.0% | — | — | ELEVATED |
| 91 | Lightspeed For Runtimes | 14 | 7.8 | 1 | 13 | — | 14.3% | 0.0% | — | — | ELEVATED |
| 92 | Openshift File Integrity Operator | 14 | 7.8 | 1 | 13 | — | 21.4% | 0.0% | — | — | ELEVATED |
| 93 | Lvms | 13 | 7.8 | 1 | 12 | — | 15.4% | 0.0% | — | — | ELEVATED |
| 94 | Certifications | 13 | 7.6 | 1 | 11 | — | 15.4% | 0.0% | — | — | ELEVATED |
| 95 | Microsoft | 12 | 7.6 | 1 | 11 | — | 0.0% | 0.0% | 31 | — | ELEVATED |
| 96 | Exploit Intelligence | 10 | 7.1 | 1 | 6 | — | 10.0% | 0.0% | — | — | ELEVATED |
| 97 | Webterminal | 10 | 7.9 | 1 | 9 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 98 | Workload Availability Mdr | 10 | 7.9 | 1 | 9 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 99 | Devworkspace | 10 | 7.8 | 1 | 9 | — | 10.0% | 0.0% | — | — | ELEVATED |
| 100 | Openshift Compliance Operator | 10 | 7.9 | 1 | 9 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 101 | Jboss Core Services | 8 | 8.1 | 1 | 7 | — | 37.5% | 12.5% | 21 | 1 | ELEVATED |
| 102 | Grafana | 7 | 7.8 | 1 | 6 | — | 0.0% | 0.0% | 31 | — | ELEVATED |
| 103 | Ext Dns Optr | 7 | 7.9 | 1 | 6 | — | 14.3% | 0.0% | — | — | ELEVATED |
| 104 | PHP Group | 6 | 6.5 | 1 | 1 | — | 0.0% | 0.0% | 13 | — | ELEVATED |
| 105 | NLnet Labs | 6 | 7.8 | 1 | 2 | — | 0.0% | 0.0% | 13 | — | ELEVATED |
| 106 | Legion of the Bouncy Castle Inc. | 5 | 7.7 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 107 | Handlebars-Lang | 5 | 8.3 | 1 | 4 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 108 | Spring | 4 | 8.2 | 1 | 3 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 109 | Python Software Foundation | 3 | 7.7 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 110 | Protobufjs | 3 | 8.2 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 111 | Go toolchain | 3 | 8.3 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 112 | Cost Management | 3 | 7.3 | 1 | 0 | — | 33.3% | 33.3% | 11 | 1 | ELEVATED |
| 113 | Linux | 100 | 7.1 | 0 | 85 | ● 1 | 12.0% | 0.0% | — | — | HIGH |
| 114 | Enterprise Linux Nvidia | 14 | 7.6 | 0 | 12 | ● 1 | 50.0% | 0.0% | 148 | — | HIGH |
| 115 | Mozilla | 108 | 7.6 | 0 | 108 | — | 0.9% | 0.0% | — | — | — |
| 116 | Directory Server | 24 | 6.0 | 0 | 9 | — | 8.3% | 0.0% | 0 | — | — |
| 117 | Workload Availability Nhc | 23 | 7.8 | 0 | 21 | — | 17.4% | 0.0% | 4 | — | — |
| 118 | Apple | 23 | 8.6 | 0 | 22 | — | 0.0% | 0.0% | — | — | — |
| 119 | Openshift Service On Aws | 16 | 7.7 | 0 | 16 | — | 6.2% | 0.0% | — | — | — |
| 120 | Netty | 14 | 7.4 | 0 | 13 | — | 0.0% | 0.0% | — | — | — |
| 121 | GIMP | 13 | 7.9 | 0 | 13 | — | 0.0% | 0.0% | 13 | — | — |
| 122 | Workload Availability Far | 11 | 7.7 | 0 | 11 | — | 18.2% | 0.0% | — | — | — |
| 123 | Go standard library | 11 | 7.6 | 0 | 11 | — | 9.1% | 0.0% | — | — | — |
| 124 | GStreamer | 10 | 8.0 | 0 | 10 | — | 0.0% | 0.0% | 11 | — | — |
| 125 | AcademySoftwareFoundation | 9 | 8.4 | 0 | 9 | — | 0.0% | 0.0% | — | — | — |
| 126 | Jboss Enterprise Web Server | 9 | 7.5 | 0 | 9 | — | 22.2% | 0.0% | — | — | — |
| 127 | Offline Knowledge Portal | 8 | 7.6 | 0 | 8 | — | 0.0% | 0.0% | — | — | — |
| 128 | Mirror Registry | 8 | 7.7 | 0 | 8 | — | 12.5% | 0.0% | — | — | — |
| 129 | ISC | 8 | 7.5 | 0 | 8 | — | 0.0% | 0.0% | 46 | — | — |
| 130 | F5 | 8 | 7.9 | 0 | 8 | — | 62.5% | 50.0% | 6 | 2 | — |
| 131 | Vercel | 7 | 7.7 | 0 | 7 | — | 14.3% | 0.0% | — | — | — |
| 132 | Ansible Core | 7 | 7.5 | 0 | 6 | — | 14.3% | 0.0% | 0 | — | — |
| 133 | GNOME | 7 | 6.7 | 0 | 2 | — | 0.0% | 0.0% | — | — | — |
| 134 | Open-Xchange GmbH | 7 | 7.5 | 0 | 7 | — | 0.0% | 0.0% | — | — | — |
| 135 | Golang.Org/X/Crypto | 7 | 7.8 | 0 | 7 | — | 0.0% | 0.0% | — | — | — |
| 136 | Openjdk | 6 | 7.6 | 0 | 6 | — | 0.0% | 0.0% | — | — | — |
| 137 | Nodejs | 6 | 7.4 | 0 | 6 | — | 16.7% | 0.0% | — | — | — |
| 138 | Undici | 6 | 7.5 | 0 | 6 | — | 0.0% | 0.0% | — | — | — |
| 139 | Openjdk Els | 6 | 7.6 | 0 | 6 | — | 0.0% | 0.0% | — | — | — |
| 140 | Satellite Capsule | 5 | 8.0 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 141 | Vim | 5 | 7.8 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 142 | Oracle Corporation | 4 | 7.5 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 143 | Kludex | 4 | 7.5 | 0 | 3 | — | 50.0% | 0.0% | — | — | — |
| 144 | LibRaw | 4 | 7.5 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 145 | Digitalbazaar | 4 | 7.5 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 146 | Ruby | 4 | 7.5 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 147 | Openshift Update Service | 4 | 7.7 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 148 | Directory Server E4S | 4 | 7.8 | 0 | 4 | — | 0.0% | 0.0% | 29 | — | — |
| 149 | Dnsmasq | 4 | 7.8 | 0 | 4 | — | 25.0% | 0.0% | — | — | — |
| 150 | Source To Image | 4 | 7.5 | 0 | 4 | — | 25.0% | 0.0% | — | — | — |
| 151 | Isaacs | 4 | 8.3 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 152 | Wireshark Foundation | 4 | 8.1 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 153 | Xmldom | 3 | 8.7 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 154 | Strukturag | 3 | 7.7 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 155 | Certificate System | 3 | 8.0 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 156 | 3 | 8.3 | 0 | 3 | — | 0.0% | 0.0% | — | — | — | |
| 157 | Rack | 3 | 7.5 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 158 | Pyca | 3 | 7.4 | 0 | 2 | — | 0.0% | 0.0% | — | — | — |
| 159 | Fast-Uri | 3 | 7.5 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 160 | Eclipse Foundation | 3 | 7.9 | 0 | 3 | — | 0.0% | 0.0% | 12 | — | — |
| 161 | Redis | 3 | 7.2 | 0 | 2 | — | 66.7% | 0.0% | — | — | — |
| 162 | Valkey-Io | 3 | 7.4 | 0 | 3 | — | 33.3% | 0.0% | — | — | — |
| 163 | Pdrive Lightspeed | 3 | 6.7 | 0 | 2 | — | 0.0% | 0.0% | 21 | — | — |
| 164 | Angular | 3 | 8.3 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 165 | Jboss Enterprise Application Platform Eus | 3 | 7.5 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |