Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Clavister

First CVE: Nov 30, 2005Active for: 21 yearsTotal CVEs: 5

Clavister develops a focused line of network security appliances and firewalls, including products such as CorePlus, its security gateway, and COS Core, targeting mid-market and enterprise perimeter defense. The vendor's disclosed vulnerabilities map primarily to generic or placeholder weakness classifications, reflecting either incomplete disclosure detail or vulnerabilities that do not fit standard categorization frameworks. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
5
Total CVEs
More Total CVEs than 83% of tracked vendors
0.4
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 4% of tracked vendors
6.8
Avg CVSS Score
Higher Avg CVSS Score than 44% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Clavister over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 30, 2005
20 years ago
Most Recent CVE
Aug 15, 2018
2,900 days ago

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (5 CVEs).

5 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2007-3803HIGH
The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blac
Jul 16, 200710.025NONO
CVE-2018-8753MEDIUM
The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 allows remote attackers to decrypt RSA-encrypted nonces by le
Aug 15, 20185.922NONO
CVE-2005-3915HIGH
The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via craf
Nov 30, 20057.520NONO
CVE-2007-3805MEDIUM
The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, which allows remote attackers to cause a d
Jul 16, 20075.416NONO
CVE-2007-3804MEDIUM
The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files.
Jul 16, 20075.015NONO
View all 5 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products5 CVEs
60%
40%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (20.0%)
Unknown4 (80.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High1 (20.0%)
Unknown4 (80.0%)
User Interaction
None1 (20.0%)
Unknown4 (80.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (20.0%)
Unknown4 (80.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (5 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Clavister.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Clavister — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Clavister's Products

View all 1 CNAs →