CVE Vendors
Vendors ranked by risk — CVE counts, exploit rates, CVSS averages, and KEV exposure
| # | Vendor | CVEs | CVSS | Crit | High | KEV | Exploit% | Post-Patch% | →Patch | →Exploit | Risk |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Red Hat Single Sign On | 68 | 7.7 | 4 | 55 | — | 4.4% | 0.0% | 7 | — | ELEVATED |
| 2 | Jboss Enterprise Application Platform | 61 | 7.9 | 4 | 52 | — | 4.9% | 0.0% | 14 | — | ELEVATED |
| 3 | Jboss Fuse | 59 | 7.9 | 4 | 51 | — | 5.1% | 0.0% | 14 | — | ELEVATED |
| 4 | Jboss Enterprise Bpms Platform | 37 | 7.8 | 4 | 29 | — | 8.1% | 0.0% | 331 | — | ELEVATED |
| 5 | Openshift Devspaces | 42 | 7.8 | 3 | 35 | — | 2.4% | 0.0% | 9 | — | ELEVATED |
| 6 | Amq Broker | 35 | 7.8 | 3 | 29 | — | 0.0% | 0.0% | 9 | — | ELEVATED |
| 7 | Apache Camel Spring Boot | 34 | 7.8 | 3 | 28 | — | 5.9% | 0.0% | — | — | ELEVATED |
| 8 | Amq Clients | 19 | 7.7 | 3 | 14 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 9 | Jboss Data Grid | 51 | 7.5 | 2 | 41 | — | 2.0% | 0.0% | 0 | — | ELEVATED |
| 10 | Satellite | 30 | 7.6 | 2 | 24 | — | 3.3% | 0.0% | 9 | — | ELEVATED |
| 11 | Camel Quarkus | 27 | 7.7 | 2 | 22 | — | 7.4% | 0.0% | 648 | — | ELEVATED |
| 12 | Enterprise Linux | 27 | 7.9 | 2 | 22 | — | 3.7% | 0.0% | 4 | — | ELEVATED |
| 13 | Optaplanner | 19 | 7.7 | 2 | 15 | — | 5.3% | 0.0% | 331 | — | ELEVATED |
| 14 | Apache Camel Quarkus | 18 | 8.0 | 2 | 14 | — | 5.6% | 0.0% | — | — | ELEVATED |
| 15 | Apache Software Foundation | 7 | 8.4 | 2 | 5 | — | 28.6% | 0.0% | — | — | ELEVATED |
| 16 | Cryostat | 33 | 7.7 | 1 | 28 | — | 3.0% | 0.0% | 4 | — | ELEVATED |
| 17 | Amq Streams | 31 | 7.6 | 1 | 26 | — | 3.2% | 0.0% | 648 | — | ELEVATED |
| 18 | Apache Camel Hawtio | 29 | 8.0 | 1 | 27 | — | 3.4% | 0.0% | 326 | — | ELEVATED |
| 19 | Build Keycloak | 28 | 7.4 | 1 | 22 | — | 0.0% | 0.0% | 0 | — | ELEVATED |
| 20 | Quarkus | 26 | 7.6 | 1 | 22 | — | 0.0% | 0.0% | 648 | — | ELEVATED |
| 21 | Apicurio Registry | 25 | 7.6 | 1 | 21 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 22 | Debezium | 24 | 7.6 | 1 | 20 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 23 | Serverless | 23 | 7.7 | 1 | 21 | — | 8.7% | 0.0% | 326 | — | ELEVATED |
| 24 | Camel Spring Boot | 12 | 8.2 | 1 | 11 | — | 0.0% | 0.0% | 648 | — | ELEVATED |
| 25 | Openshift Ai | 8 | 7.9 | 1 | 6 | — | 12.5% | 0.0% | — | — | ELEVATED |
| 26 | Legion of the Bouncy Castle Inc. | 5 | 7.7 | 1 | 2 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 27 | Spring | 4 | 8.2 | 1 | 3 | — | 0.0% | 0.0% | — | — | ELEVATED |
| 28 | Enterprise Linux Ai | 22 | 7.6 | 0 | 20 | — | 4.5% | 0.0% | 4 | — | — |
| 29 | Netty | 21 | 7.6 | 0 | 20 | — | 0.0% | 0.0% | — | — | — |
| 30 | Service Registry | 19 | 7.4 | 0 | 17 | — | 5.3% | 0.0% | 648 | — | — |
| 31 | Openshift | 12 | 7.9 | 0 | 11 | — | 8.3% | 0.0% | 4 | — | — |
| 32 | Logging | 12 | 7.9 | 0 | 11 | — | 8.3% | 0.0% | 4 | — | — |
| 33 | Red Hat | 12 | 6.9 | 0 | 7 | — | 0.0% | 0.0% | 10 | — | — |
| 34 | Rhdh | 11 | 7.9 | 0 | 10 | — | 9.1% | 0.0% | 4 | — | — |
| 35 | Quay | 11 | 7.8 | 0 | 10 | — | 9.1% | 0.0% | 4 | — | — |
| 36 | Red Hat 3Scale Amp | 10 | 7.9 | 0 | 9 | — | 10.0% | 0.0% | 4 | — | — |
| 37 | Acm | 10 | 7.9 | 0 | 9 | — | 10.0% | 0.0% | 4 | — | — |
| 38 | Ansible Automation Platform | 10 | 7.8 | 0 | 9 | — | 10.0% | 0.0% | 4 | — | — |
| 39 | Network Observ Optr | 8 | 7.8 | 0 | 7 | — | 12.5% | 0.0% | 4 | — | — |
| 40 | Trusted Artifact Signer | 8 | 7.9 | 0 | 7 | — | 12.5% | 0.0% | 4 | — | — |
| 41 | Openshift Pipelines | 8 | 7.8 | 0 | 7 | — | 12.5% | 0.0% | 4 | — | — |
| 42 | Openshift Data Foundation | 8 | 7.8 | 0 | 7 | — | 12.5% | 0.0% | 4 | — | — |
| 43 | Offline Knowledge Portal | 7 | 7.6 | 0 | 7 | — | 0.0% | 0.0% | — | — | — |
| 44 | Advanced Cluster Security | 6 | 7.7 | 0 | 5 | — | 16.7% | 0.0% | — | — | — |
| 45 | Openshift Gitops | 6 | 7.6 | 0 | 5 | — | 16.7% | 0.0% | 4 | — | — |
| 46 | Service Mesh | 6 | 7.7 | 0 | 5 | — | 16.7% | 0.0% | — | — | — |
| 47 | Openshift Distributed Tracing | 5 | 7.8 | 0 | 4 | — | 20.0% | 0.0% | — | — | — |
| 48 | Directory Server | 5 | 7.8 | 0 | 4 | — | 20.0% | 0.0% | — | — | — |
| 49 | Workload Availability Nhc | 5 | 7.7 | 0 | 4 | — | 20.0% | 0.0% | 4 | — | — |
| 50 | Connectivity Link | 5 | 7.7 | 0 | 4 | — | 20.0% | 0.0% | 4 | — | — |
| 51 | Edge Manager | 5 | 7.5 | 0 | 4 | — | 20.0% | 0.0% | — | — | — |
| 52 | Jboss Enterprise Web Server | 5 | 7.6 | 0 | 5 | — | 0.0% | 0.0% | — | — | — |
| 53 | Confidential Compute Attestation | 5 | 7.7 | 0 | 4 | — | 20.0% | 0.0% | 4 | — | — |
| 54 | Migration Toolkit Applications | 4 | 7.5 | 0 | 3 | — | 25.0% | 0.0% | — | — | — |
| 55 | Cluster Observability Operator | 4 | 7.8 | 0 | 3 | — | 25.0% | 0.0% | — | — | — |
| 56 | Gatekeeper | 4 | 7.5 | 0 | 3 | — | 25.0% | 0.0% | — | — | — |
| 57 | Podman Desktop | 4 | 8.3 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 58 | Ansible Portal | 4 | 8.0 | 0 | 4 | — | 0.0% | 0.0% | — | — | — |
| 59 | Jboss Enterprise Application Platform Eus | 4 | 7.7 | 0 | 3 | — | 25.0% | 0.0% | 14 | — | — |
| 60 | Rhmt | 4 | 7.7 | 0 | 3 | — | 25.0% | 0.0% | 4 | — | — |
| 61 | Rhel E4S | 3 | 7.8 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 62 | Trusted Profile Analyzer | 3 | 7.5 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 63 | Io.Netty | 3 | 7.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |
| 64 | Rhel Tus | 3 | 7.8 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 65 | Container Native Virtualization | 3 | 7.5 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 66 | Rhel Eus | 3 | 7.8 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 67 | Migration Toolkit Virtualization | 3 | 7.5 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 68 | Enterprise Linux Eus | 3 | 7.8 | 0 | 2 | — | 33.3% | 0.0% | — | — | — |
| 69 | Isaacs | 3 | 8.4 | 0 | 3 | — | 0.0% | 0.0% | — | — | — |