Netskope

First CVE: Nov 3, 2022Active for: 4 years
17
CVEs Published
More CVEs Published than 36% of tracked CNAs
3.4
Avg CVEs / Year
More Avg CVEs / Year than 25% of tracked CNAs
6.5
Avg CVSS Score
Higher Avg CVSS Score than 24% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%

Self-Reporting Analysis

Of all the CVEs published by Netskope as a CNA, 29.4% affect products that Netskope develops as a vendor.

29.4%
70.6%
Self-reported: 5Third-party: 12

Of all the CVEs published that affect products developed by Netskope, 50.0% are self-published by Netskope as a CNA.

50.0%
50.0%
Self-published: 5Published by other CNAs: 5

Trends Over Time

The number and severity of CVEs published by Netskope over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 3, 2022
3 years ago
Most Recent CVE
Jun 17, 2026
37 days ago

Top CVEs

All CVEs published by Netskope as a CNA, regardless of affected vendor or product.

17 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unpri
Apr 29, 20266.827NONO
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Pro
Jun 17, 20266.826NONO
An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope
Aug 14, 20256.025NONO
Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnera
Nov 3, 20227.825NONO
Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the cust
Jun 17, 20266.824NONO
Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static
Aug 26, 20247.524NONO
Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope client by using a spec
Nov 6, 20238.824NONO
Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unpri
Mar 17, 20266.823NONO
Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man
Aug 14, 20257.023NONO
Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privil
Mar 17, 20266.722NONO

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA17 CVEs
Severity distribution among all CVEs352,294 CVEs
LowMediumHigh
Attack Vector
Local14 (82.4%)
Network2 (11.8%)
Unknown0 (0.0%)
Physical1 (5.9%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (76.5%)
High4 (23.5%)
Unknown0 (0.0%)
User Interaction
None17 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low10 (58.8%)
High6 (35.3%)
None1 (5.9%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (17 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID published by Netskope as a CNA.

Media Mentions

Media articles that mention a CVE ID published by Netskope as a CNA — matched by CVE ID, not by organization name.

Top Affected Vendors

Top Affected Products

Top CWEs