CVE Vendors
Vendors ranked by risk — CVE counts, exploit rates, CVSS averages, and KEV exposure
| # | Vendor | CVEs | CVSS | Crit | High | KEV | Exploit% | Post-Patch% | →Patch | →Exploit | Risk |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Jboss Enterprise Application Platform | 98 | 7.9 | 8 | 83 | ● 1 | 11.2% | 1.0% | 13 | 33 | HIGH |
| 2 | Jboss Fuse | 82 | 7.9 | 6 | 70 | ● 1 | 12.2% | 1.2% | 14 | 33 | HIGH |
| 3 | Jboss Enterprise Bpms Platform | 45 | 8.0 | 6 | 34 | — | 8.9% | 0.0% | 331 | — | ELEVATED |
| 4 | Red Hat Single Sign On | 61 | 7.9 | 4 | 52 | — | 4.9% | 0.0% | 14 | — | ELEVATED |
| 5 | Apache Camel Spring Boot | 42 | 7.9 | 4 | 35 | — | 16.7% | 2.4% | — | 33 | ELEVATED |
| 6 | Amq Broker | 45 | 7.7 | 3 | 38 | ● 1 | 4.4% | 0.0% | 9 | — | HIGH |
| 7 | Enterprise Linux | 43 | 8.0 | 3 | 36 | ● 1 | 4.7% | 0.0% | 4 | — | HIGH |
| 8 | Apache Software Foundation | 22 | 8.0 | 3 | 18 | ● 1 | 36.4% | 0.0% | — | — | HIGH |
| 9 | Openshift Devspaces | 52 | 7.8 | 3 | 44 | — | 3.8% | 0.0% | 9 | — | ELEVATED |
| 10 | Camel Quarkus | 32 | 7.8 | 3 | 26 | — | 18.8% | 3.1% | 648 | 33 | ELEVATED |
| 11 | Apache Camel Quarkus | 22 | 8.0 | 3 | 17 | — | 22.7% | 4.5% | — | 33 | ELEVATED |
| 12 | Amq Clients | 19 | 7.7 | 3 | 14 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 13 | Jboss Data Grid | 61 | 7.7 | 2 | 53 | ● 1 | 4.9% | 0.0% | 331 | — | HIGH |
| 14 | Apache Camel Hawtio | 38 | 8.0 | 2 | 34 | — | 7.9% | 0.0% | 326 | — | ELEVATED |
| 15 | Satellite | 36 | 7.7 | 2 | 29 | — | 2.8% | 0.0% | 9 | — | ELEVATED |
| 16 | Camel Spring Boot | 24 | 7.9 | 2 | 21 | — | 8.3% | 0.0% | 648 | — | ELEVATED |
| 17 | Optaplanner | 19 | 7.7 | 2 | 15 | — | 5.3% | 0.0% | 331 | — | ELEVATED |
| 18 | Cryostat | 42 | 7.6 | 1 | 36 | — | 4.8% | 0.0% | 4 | — | ELEVATED |
| 19 | Amq Streams | 38 | 7.6 | 1 | 31 | — | 2.6% | 0.0% | 648 | — | ELEVATED |
| 20 | Debezium | 29 | 7.5 | 1 | 24 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 21 | Build Keycloak | 28 | 7.8 | 1 | 26 | — | 3.6% | 0.0% | 329 | — | ELEVATED |
| 22 | Apicurio Registry | 28 | 7.6 | 1 | 23 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 23 | Quarkus | 26 | 7.6 | 1 | 22 | — | 0.0% | 0.0% | 648 | — | ELEVATED |
| 24 | Serverless | 24 | 7.8 | 1 | 22 | — | 8.3% | 0.0% | 326 | — | ELEVATED |
| 25 | Openshift Ai | 14 | 7.4 | 1 | 10 | — | 7.1% | 0.0% | — | — | ELEVATED |
| 26 | Legion of the Bouncy Castle Inc. | 5 | 7.7 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 27 | Spring | 4 | 8.2 | 1 | 3 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 28 | Enterprise Linux Ai | 27 | 7.6 | 0 | 24 | — | 7.4% | 0.0% | 4 | — | — |
| 29 | Service Registry | 21 | 7.4 | 0 | 18 | — | 4.8% | 0.0% | 648 | — | — |
| 30 | Netty | 21 | 7.6 | 0 | 20 | — | 0.0% | 0.0% | — | — | — |
| 31 | Rhdh | 20 | 7.7 | 0 | 18 | — | 10.0% | 0.0% | 4 | — | — |
| 32 | Openshift | 20 | 7.8 | 0 | 18 | — | 10.0% | 0.0% | 4 | — | — |
| 33 | Ansible Automation Platform | 18 | 7.8 | 0 | 16 | — | 11.1% | 0.0% | 4 | — | — |
| 34 | Openshift Pipelines | 16 | 7.7 | 0 | 14 | — | 12.5% | 0.0% | 4 | — | — |
| 35 | Quay | 15 | 7.8 | 0 | 13 | — | 13.3% | 0.0% | 4 | — | — |
| 36 | Ansible Portal | 13 | 7.7 | 0 | 12 | — | 7.7% | 0.0% | — | — | — |
| 37 | Trusted Artifact Signer | 13 | 7.9 | 0 | 11 | — | 7.7% | 0.0% | 4 | — | — |
| 38 | Red Hat 3Scale Amp | 13 | 7.8 | 0 | 11 | — | 7.7% | 0.0% | 4 | — | — |
| 39 | Logging | 13 | 8.0 | 0 | 12 | — | 7.7% | 0.0% | 4 | — | — |
| 40 | Service Mesh | 12 | 7.7 | 0 | 10 | — | 16.7% | 0.0% | — | — | — |
| 41 | Acm | 12 | 7.8 | 0 | 10 | — | 8.3% | 0.0% | 4 | — | — |
| 42 | Openshift Data Foundation | 12 | 7.7 | 0 | 10 | — | 8.3% | 0.0% | 4 | — | — |
| 43 | Podman Desktop | 12 | 8.0 | 0 | 11 | — | 8.3% | 0.0% | — | — | — |
| 44 | Cluster Observability Operator | 11 | 7.7 | 0 | 9 | — | 18.2% | 0.0% | — | — | — |
| 45 | Advanced Cluster Security | 11 | 7.8 | 0 | 9 | — | 9.1% | 0.0% | — | — | — |
| 46 | Network Observ Optr | 10 | 7.8 | 0 | 8 | — | 10.0% | 0.0% | 4 | — | — |
| 47 | Workload Availability Nhc | 10 | 7.6 | 0 | 8 | — | 20.0% | 0.0% | 4 | — | — |
| 48 | Offline Knowledge Portal | 10 | 7.2 | 0 | 9 | — | 0.0% | 0.0% | — | — | — |
| 49 | Discovery | 9 | 7.7 | 0 | 7 | — | 22.2% | 0.0% | — | — | — |
| 50 | Rhmt | 9 | 7.7 | 0 | 7 | — | 22.2% | 0.0% | 4 | — | — |
| 51 | Container Native Virtualization | 8 | 7.6 | 0 | 6 | — | 25.0% | 0.0% | — | — | — |
| 52 | Connectivity Link | 8 | 7.5 | 0 | 6 | — | 12.5% | 0.0% | 4 | — | — |
| 53 | Gatekeeper | 8 | 7.6 | 0 | 6 | — | 12.5% | 0.0% | — | — | — |
| 54 | Openshift Gitops | 8 | 7.7 | 0 | 6 | — | 12.5% | 0.0% | 4 | — | — |
| 55 | Red Hat | 8 | 7.9 | 0 | 7 | — | 12.5% | 12.5% | 14 | 33 | — |
| 56 | Openshift Distributed Tracing | 6 | 7.6 | 0 | 4 | — | 16.7% | 0.0% | — | — | — |
| 57 | Rhel Eus | 6 | 7.6 | 0 | 5 | — | 16.7% | 0.0% | — | — | — |
| 58 | Migration Toolkit Applications | 6 | 7.6 | 0 | 4 | — | 16.7% | 0.0% | — | — | — |
| 59 | Edge Manager | 6 | 7.4 | 0 | 4 | — | 16.7% | 0.0% | — | — | — |
| 60 | Enterprise Linux Eus | 6 | 7.6 | 0 | 5 | — | 16.7% | 0.0% | — | — | — |
| 61 | Trusted Profile Analyzer | 5 | 7.6 | 0 | 3 | — | 20.0% | 0.0% | — | — | — |
| 62 | Jboss Enterprise Web Server | 5 | 7.6 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 63 | Hummingbird | 5 | 7.8 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 64 | Directory Server | 5 | 7.8 | 0 | 4 | — | 20.0% | 0.0% | — | — | — |
| 65 | Confidential Compute Attestation | 5 | 7.7 | 0 | 4 | — | 20.0% | 0.0% | 4 | — | — |
| 66 | Migration Toolkit Virtualization | 4 | 7.3 | 0 | 2 | — | 25.0% | 0.0% | — | — | — |
| 67 | Jboss Enterprise Application Platform Eus | 4 | 7.7 | 0 | 3 | — | 25.0% | 0.0% | 14 | — | — |
| 68 | Isaacs | 3 | 8.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 69 | Io.Netty | 3 | 7.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 70 | Vitejs | 3 | 8.0 | 0 | 3 | — | 33.3% | 0.0% | — | — | — |
| 71 | Rhel E4S | 3 | 7.8 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 72 | Rhel Tus | 3 | 7.8 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 73 | Undici | 3 | 7.5 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 74 | Eclipse Foundation | 3 | 7.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |