CVE Vendors
Vendors ranked by risk — CVE counts, exploit rates, CVSS averages, and KEV exposure
| # | Vendor | CVEs | CVSS | Crit | High | KEV | Exploit% | Post-Patch% | →Patch | →Exploit | Risk |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Openshift | 266 | 7.5 | 12 | 208 | ● 1 | 7.5% | 1.1% | 13 | 2 | HIGH |
| 2 | Enterprise Linux | 246 | 7.5 | 12 | 186 | ● 1 | 8.5% | 1.6% | 13 | 2 | HIGH |
| 3 | Openshift Devspaces | 135 | 7.7 | 8 | 113 | — | 4.4% | 0.7% | 7 | 1 | ELEVATED |
| 4 | Openshift Pipelines | 81 | 7.7 | 8 | 66 | — | 7.4% | 0.0% | 7 | — | ELEVATED |
| 5 | Openshift Ai | 87 | 7.9 | 6 | 73 | ● 1 | 10.3% | 0.0% | 7 | — | HIGH |
| 6 | Rhel Eus | 79 | 7.5 | 6 | 60 | ● 1 | 16.5% | 3.8% | 24 | 2 | HIGH |
| 7 | Enterprise Linux Ai | 101 | 7.7 | 6 | 86 | — | 7.9% | 0.0% | 4 | — | ELEVATED |
| 8 | Cryostat | 97 | 7.7 | 6 | 83 | — | 5.2% | 0.0% | 4 | — | ELEVATED |
| 9 | Acm | 88 | 7.7 | 6 | 75 | — | 6.8% | 1.1% | 9 | 2 | ELEVATED |
| 10 | Ansible Automation Platform | 98 | 7.7 | 5 | 83 | ● 1 | 11.2% | 0.0% | 2 | — | HIGH |
| 11 | Enterprise Linux Eus | 75 | 7.4 | 5 | 56 | ● 1 | 16.0% | 2.7% | 24 | 6 | HIGH |
| 12 | Rhel E4S | 66 | 7.5 | 5 | 49 | ● 1 | 18.2% | 4.5% | 21 | 2 | HIGH |
| 13 | Hummingbird | 120 | 7.1 | 5 | 79 | — | 4.2% | 1.7% | 13 | 2 | ELEVATED |
| 14 | Jboss Fuse | 78 | 7.8 | 5 | 65 | — | 2.6% | 0.0% | 9 | — | ELEVATED |
| 15 | Service Mesh | 71 | 7.7 | 5 | 60 | — | 9.9% | 0.0% | 0 | — | ELEVATED |
| 16 | Ai Inference Server | 58 | 7.7 | 5 | 46 | — | 6.9% | 1.7% | 10 | 1 | ELEVATED |
| 17 | Jboss Enterprise Bpms Platform | 46 | 7.7 | 5 | 34 | — | 2.2% | 0.0% | 14 | — | ELEVATED |
| 18 | Rhel Aus | 55 | 7.5 | 4 | 40 | ● 1 | 16.4% | 1.8% | 11 | 10 | HIGH |
| 19 | Rhel Tus | 55 | 7.5 | 4 | 40 | ● 1 | 18.2% | 3.6% | 20 | 6 | HIGH |
| 20 | Rhel Eus Long Life | 53 | 7.5 | 4 | 38 | ● 1 | 18.9% | 3.8% | 20 | 6 | HIGH |
| 21 | Satellite | 98 | 7.5 | 4 | 81 | — | 7.1% | 0.0% | 4 | — | ELEVATED |
| 22 | Rhdh | 79 | 7.8 | 4 | 69 | — | 7.6% | 0.0% | 4 | — | ELEVATED |
| 23 | Red Hat | 76 | 7.0 | 4 | 41 | — | 1.3% | 1.3% | 6 | 10 | ELEVATED |
| 24 | Jboss Data Grid | 73 | 7.6 | 4 | 60 | — | 4.1% | 0.0% | 14 | — | ELEVATED |
| 25 | Openshift Data Foundation | 63 | 7.8 | 4 | 56 | — | 11.1% | 1.6% | 14 | 2 | ELEVATED |
| 26 | Container Native Virtualization | 62 | 7.8 | 4 | 54 | — | 8.1% | 0.0% | — | — | ELEVATED |
| 27 | Openshift Gitops | 54 | 7.8 | 4 | 46 | — | 11.1% | 0.0% | 4 | — | ELEVATED |
| 28 | Openshift Api Data Protection | 24 | 8.0 | 4 | 20 | — | 12.5% | 0.0% | — | — | ELEVATED |
| 29 | Quay | 79 | 7.7 | 3 | 70 | — | 8.9% | 0.0% | 4 | — | ELEVATED |
| 30 | Trusted Artifact Signer | 74 | 7.7 | 3 | 64 | — | 6.8% | 0.0% | 4 | — | ELEVATED |
| 31 | Discovery | 64 | 7.3 | 3 | 46 | — | 7.8% | 3.1% | 18 | 2 | ELEVATED |
| 32 | Jboss Enterprise Application Platform | 59 | 7.7 | 3 | 50 | — | 3.4% | 0.0% | 9 | — | ELEVATED |
| 33 | Amq Broker | 58 | 7.6 | 3 | 50 | — | 3.4% | 0.0% | 9 | — | ELEVATED |
| 34 | Ansible Portal | 54 | 7.8 | 3 | 47 | — | 5.6% | 0.0% | 0 | — | ELEVATED |
| 35 | Apicurio Registry | 46 | 7.6 | 3 | 37 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 36 | Podman Desktop | 44 | 7.9 | 3 | 38 | — | 6.8% | 0.0% | — | — | ELEVATED |
| 37 | Red Hat Single Sign On | 44 | 7.8 | 3 | 37 | — | 2.3% | 0.0% | 9 | — | ELEVATED |
| 38 | Logging | 41 | 7.9 | 3 | 37 | — | 9.8% | 0.0% | 27 | — | ELEVATED |
| 39 | Rhel Els | 23 | 7.8 | 3 | 19 | — | 8.7% | 4.3% | 37 | 10 | ELEVATED |
| 40 | Amq Clients | 22 | 7.6 | 3 | 17 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 41 | Gitea | 4 | 8.7 | 3 | 1 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 42 | Rclone | 3 | 9.4 | 3 | 0 | — | 33.3% | 0.0% | — | — | ELEVATED |
| 43 | Apache Camel Hawtio | 63 | 7.7 | 2 | 56 | — | 4.8% | 0.0% | 4 | — | ELEVATED |
| 44 | Advanced Cluster Security | 59 | 7.7 | 2 | 52 | — | 6.8% | 0.0% | — | — | ELEVATED |
| 45 | Amq Streams | 54 | 7.5 | 2 | 44 | — | 3.7% | 0.0% | — | — | ELEVATED |
| 46 | Serverless | 49 | 7.7 | 2 | 46 | — | 4.1% | 0.0% | 4 | — | ELEVATED |
| 47 | Rhmt | 49 | 7.7 | 2 | 42 | — | 12.2% | 0.0% | 4 | — | ELEVATED |
| 48 | Migration Toolkit Applications | 49 | 7.6 | 2 | 40 | — | 8.2% | 0.0% | 0 | — | ELEVATED |
| 49 | Red Hat 3Scale Amp | 47 | 7.8 | 2 | 40 | — | 8.5% | 0.0% | 9 | — | ELEVATED |
| 50 | Network Observ Optr | 47 | 7.7 | 2 | 41 | — | 8.5% | 0.0% | 4 | — | ELEVATED |
| 51 | Openstack | 38 | 7.7 | 2 | 35 | — | 10.5% | 0.0% | 13 | — | ELEVATED |
| 52 | Gatekeeper | 38 | 7.7 | 2 | 32 | — | 10.5% | 0.0% | — | — | ELEVATED |
| 53 | Rhui | 38 | 7.0 | 2 | 25 | — | 7.9% | 5.3% | 9 | 2 | ELEVATED |
| 54 | Openshift Distributed Tracing | 34 | 7.6 | 2 | 27 | — | 8.8% | 0.0% | 11 | — | ELEVATED |
| 55 | Confidential Compute Attestation | 34 | 7.7 | 2 | 30 | — | 8.8% | 0.0% | 2 | — | ELEVATED |
| 56 | Multicluster Engine | 31 | 7.7 | 2 | 25 | — | 6.5% | 0.0% | — | — | ELEVATED |
| 57 | Multicluster Globalhub | 29 | 7.8 | 2 | 27 | — | 3.4% | 0.0% | 49 | — | ELEVATED |
| 58 | Trusted Profile Analyzer | 26 | 7.7 | 2 | 19 | — | 7.7% | 0.0% | — | — | ELEVATED |
| 59 | Apache Camel Spring Boot | 23 | 7.5 | 2 | 18 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 60 | Openshift Builds | 21 | 7.9 | 2 | 19 | — | 9.5% | 0.0% | — | — | ELEVATED |
| 61 | Optaplanner | 19 | 7.7 | 2 | 15 | — | 5.3% | 0.0% | 14 | — | ELEVATED |
| 62 | Migration Toolkit Virtualization | 17 | 7.7 | 2 | 12 | — | 17.6% | 0.0% | 0 | — | ELEVATED |
| 63 | Insights Proxy | 13 | 7.3 | 2 | 7 | — | 23.1% | 15.4% | 13 | 2 | ELEVATED |
| 64 | Service Interconnect | 13 | 8.0 | 2 | 11 | — | 23.1% | 7.7% | 21 | 1 | ELEVATED |
| 65 | Apache Software Foundation | 12 | 7.5 | 2 | 9 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 66 | Kueue Operator | 5 | 7.9 | 2 | 2 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 67 | BerriAI | 4 | 8.9 | 1 | 3 | ● 1 | 100.0% | 0.0% | — | — | HIGH |
| 68 | Edge Manager | 33 | 7.8 | 1 | 30 | — | 12.1% | 0.0% | — | — | ELEVATED |
| 69 | Ceph Storage | 30 | 7.4 | 1 | 23 | — | 13.3% | 0.0% | 66 | — | ELEVATED |
| 70 | Service Registry | 30 | 7.4 | 1 | 24 | — | 3.3% | 0.0% | — | — | ELEVATED |
| 71 | Quarkus | 28 | 7.6 | 1 | 24 | — | 0.0% | 0.0% | 21 | — | ELEVATED |
| 72 | Debezium | 28 | 7.4 | 1 | 23 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 73 | Build Keycloak | 28 | 7.8 | 1 | 26 | — | 3.6% | 0.0% | — | — | ELEVATED |
| 74 | Cluster Observability Operator | 26 | 7.8 | 1 | 22 | — | 11.5% | 0.0% | — | — | ELEVATED |
| 75 | Camel Quarkus | 26 | 7.5 | 1 | 22 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 76 | Connectivity Link | 25 | 7.8 | 1 | 22 | — | 12.0% | 0.0% | 4 | — | ELEVATED |
| 77 | Camel Spring Boot | 24 | 7.6 | 1 | 21 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 78 | External Secrets Operator | 23 | 7.9 | 1 | 22 | — | 8.7% | 0.0% | — | — | ELEVATED |
| 79 | Zero Trust Workload Identity Manager | 23 | 7.7 | 1 | 21 | — | 8.7% | 0.0% | — | — | ELEVATED |
| 80 | Assisted Installer | 22 | 7.7 | 1 | 21 | — | 9.1% | 0.0% | — | — | ELEVATED |
| 81 | Cert Manager | 20 | 7.8 | 1 | 19 | — | 10.0% | 0.0% | — | — | ELEVATED |
| 82 | Apache Camel Quarkus | 19 | 7.7 | 1 | 16 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 83 | Openshift Security Profiles Operator | 18 | 7.7 | 1 | 17 | — | 11.1% | 0.0% | — | — | ELEVATED |
| 84 | Axios | 16 | 7.6 | 1 | 13 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 85 | Openshift Custom Metrics Autoscaler | 15 | 7.8 | 1 | 14 | — | 13.3% | 0.0% | — | — | ELEVATED |
| 86 | Stf | 15 | 7.6 | 1 | 13 | — | 20.0% | 0.0% | 0 | — | ELEVATED |
| 87 | Openshift File Integrity Operator | 14 | 7.8 | 1 | 13 | — | 21.4% | 0.0% | — | — | ELEVATED |
| 88 | Openshift Cluster Manager Cli | 14 | 7.8 | 1 | 13 | — | 14.3% | 0.0% | — | — | ELEVATED |
| 89 | Lightspeed For Runtimes | 14 | 7.8 | 1 | 13 | — | 14.3% | 0.0% | — | — | ELEVATED |
| 90 | Lvms | 14 | 7.8 | 1 | 13 | — | 14.3% | 0.0% | — | — | ELEVATED |
| 91 | Certifications | 13 | 7.6 | 1 | 11 | — | 15.4% | 0.0% | — | — | ELEVATED |
| 92 | Workload Availability Mdr | 11 | 7.8 | 1 | 10 | — | 18.2% | 0.0% | — | — | ELEVATED |
| 93 | Openshift Compliance Operator | 10 | 7.9 | 1 | 9 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 94 | Devworkspace | 10 | 7.8 | 1 | 9 | — | 10.0% | 0.0% | — | — | ELEVATED |
| 95 | Webterminal | 10 | 7.9 | 1 | 9 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 96 | Ext Dns Optr | 8 | 8.0 | 1 | 7 | — | 12.5% | 0.0% | — | — | ELEVATED |
| 97 | Rhosemc | 6 | 6.1 | 1 | 2 | — | 0.0% | 0.0% | 9 | — | ELEVATED |
| 98 | NLnet Labs | 6 | 7.8 | 1 | 2 | — | 0.0% | 0.0% | 13 | — | ELEVATED |
| 99 | Spring | 6 | 8.0 | 1 | 5 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 100 | Handlebars-Lang | 5 | 8.3 | 1 | 4 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 101 | Vllm-Project | 5 | 8.3 | 1 | 4 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 102 | Argoproj | 5 | 8.5 | 1 | 4 | — | 20.0% | 0.0% | — | — | ELEVATED |
| 103 | Legion of the Bouncy Castle Inc. | 4 | 7.5 | 1 | 1 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 104 | Cost Management | 3 | 7.3 | 1 | 0 | — | 33.3% | 33.3% | 11 | 1 | ELEVATED |
| 105 | Kernel Module Management | 3 | 7.9 | 1 | 2 | — | 33.3% | 0.0% | — | — | ELEVATED |
| 106 | Go toolchain | 3 | 8.3 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 107 | Jboss Core Services | 3 | 8.2 | 1 | 2 | — | 33.3% | 33.3% | 21 | 1 | ELEVATED |
| 108 | Protobufjs | 3 | 8.2 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 109 | Linux | 16 | 7.7 | 0 | 15 | ● 1 | 50.0% | 0.0% | — | — | HIGH |
| 110 | Enterprise Linux Nvidia | 14 | 7.6 | 0 | 12 | ● 1 | 50.0% | 0.0% | 148 | — | HIGH |
| 111 | Exploit Intelligence | 9 | 7.0 | 0 | 6 | ● 1 | 22.2% | 0.0% | — | — | HIGH |
| 112 | Workload Availability Nhc | 23 | 7.8 | 0 | 21 | — | 17.4% | 0.0% | 4 | — | — |
| 113 | Openshift Service On Aws | 16 | 7.7 | 0 | 16 | — | 6.2% | 0.0% | — | — | — |
| 114 | Netty | 15 | 7.5 | 0 | 14 | — | 0.0% | 0.0% | — | — | — |
| 115 | Traefik | 14 | 7.4 | 0 | 11 | — | 7.1% | 0.0% | — | — | — |
| 116 | Go standard library | 11 | 7.6 | 0 | 11 | — | 9.1% | 0.0% | — | — | — |
| 117 | Offline Knowledge Portal | 11 | 7.2 | 0 | 10 | — | 0.0% | 0.0% | — | — | — |
| 118 | Workload Availability Far | 11 | 7.7 | 0 | 11 | — | 18.2% | 0.0% | — | — | — |
| 119 | Mirror Registry | 8 | 7.7 | 0 | 8 | — | 12.5% | 0.0% | — | — | — |
| 120 | Ansible Core | 8 | 7.6 | 0 | 7 | — | 12.5% | 0.0% | 0 | — | — |
| 121 | Nats-Io | 7 | 7.7 | 0 | 7 | — | 0.0% | 0.0% | — | — | — |
| 122 | ISC | 7 | 7.5 | 0 | 7 | — | 0.0% | 0.0% | 50 | — | — |
| 123 | Golang.Org/X/Crypto | 7 | 7.8 | 0 | 7 | — | 0.0% | 0.0% | — | — | — |
| 124 | Directory Server | 6 | 7.8 | 0 | 5 | — | 33.3% | 0.0% | — | — | — |
| 125 | Undici | 6 | 7.5 | 0 | 6 | — | 0.0% | 0.0% | — | — | — |
| 126 | Nltk | 5 | 7.9 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 127 | Vim | 5 | 7.8 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 128 | Satellite Capsule | 5 | 8.0 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 129 | Xmldom | 5 | 8.5 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 130 | Openshift Update Service | 4 | 7.7 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 131 | Jboss Enterprise Web Server | 4 | 7.4 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 132 | Isaacs | 4 | 8.3 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 133 | Jboss Enterprise Application Platform Eus | 4 | 7.7 | 0 | 3 | — | 25.0% | 0.0% | 14 | — | — |
| 134 | Dnsmasq | 4 | 7.8 | 0 | 4 | — | 25.0% | 0.0% | — | — | — |
| 135 | Source To Image | 4 | 7.5 | 0 | 4 | — | 25.0% | 0.0% | — | — | — |
| 136 | HashiCorp | 4 | 7.7 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 137 | Vitejs | 3 | 8.0 | 0 | 3 | — | 33.3% | 0.0% | — | — | — |
| 138 | Pdrive Lightspeed | 3 | 6.7 | 0 | 2 | — | 0.0% | 0.0% | 21 | — | — |
| 139 | Fast-Uri | 3 | 7.5 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 140 | Moby | 3 | 8.2 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 141 | Kludex | 3 | 7.5 | 0 | 2 | — | 66.7% | 0.0% | — | — | — |
| 142 | Coredns | 3 | 7.8 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 143 | Pyca | 3 | 7.4 | 0 | 2 | — | 0.0% | 0.0% | — | — | — |
| 144 | Eclipse Foundation | 3 | 7.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 145 | Ruby | 3 | 7.2 | 0 | 2 | — | 0.0% | 0.0% | — | — | — |