Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Ansys

First CVE: Sep 15, 2022Active for: 4 yearsTotal CVEs: 21
52.6
VTI Score
TOP TARGET

Ansys maintains a specialized portfolio of computer-aided engineering and design software, including tools such as SpaceClaim and PyAnsys Geometry, that are embedded in product development and simulation workflows across manufacturing, aerospace, and industrial sectors. The vulnerability exposure concentrates in a small set of products and recurs through weakness classes characteristic of native computational codebases: out-of-bounds reads and writes, use-after-free conditions, uninitialized pointer access, and OS command injection, reflecting the memory-safety and input-handling demands of geometry processing and CAD operations. While the vendor's disclosure volume is modest relative to consumer or server-focused peers, the attack surface and downstream risk depend on deployment context—design tools exposed to untrusted CAD files or network input present higher risk than isolated workstations. Defenders should focus on inventory of Ansys products in engineering environments and prioritize patching where designs are imported from external or adversarial sources; current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
21
Total CVEs
More Total CVEs than 96% of tracked vendors
5.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 98% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 74% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Ansys over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 15, 2022
3 years ago
Most Recent CVE
May 3, 2024
812 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (21 CVEs).

21 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-40654HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.826NONO
CVE-2022-40652HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.826NONO
CVE-2022-40648HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.826NONO
CVE-2022-40637HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.826NONO
CVE-2022-40653HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.825NONO
CVE-2022-40650HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.825NONO
CVE-2022-40649HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.825NONO
CVE-2022-40647HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.825NONO
CVE-2022-40645HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.825NONO
CVE-2022-40644HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerabili
Sep 15, 20227.825NONO
View all 21 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products21 CVEs
100%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
High
Attack Vector
Local21 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low21 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (4.8%)
Unknown0 (0.0%)
Required20 (95.2%)
Privileges Required
Low1 (4.8%)
High0 (0.0%)
None20 (95.2%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (21 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Ansys.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Ansys — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Ansys's Products

View all 2 CNAs →

Top CWEs