Enterprise Manager

Vendor:

First CVE: May 24, 2012 · Active for 14 years

39
Total CVEs
More Total CVEs than 97% of tracked products
4.9
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
10.3%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Enterprise Manager over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 24, 2012
14 years ago
Most Recent CVE
Feb 6, 2020
2,360 days ago

CVE Severity & Scoring

Enterprise Manager39 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local6 (15.4%)
Network25 (64.1%)
Unknown8 (20.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low29 (74.4%)
High2 (5.1%)
Unknown8 (20.5%)
User Interaction
None29 (74.4%)
Unknown8 (20.5%)
Required2 (5.1%)
Privileges Required
Low9 (23.1%)
High6 (15.4%)
None16 (41.0%)
Unknown8 (20.5%)

Top CVEs

Signals from CVEs in this product scope (39 CVEs).

39 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use thi
Sep 25, 20187.881YESYES
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users
May 7, 20145.578YESYES
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-H
Jul 9, 20127.878NOYES
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger
Jun 19, 20197.575NONO
The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterpri
Oct 15, 20149.336NOYES
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes i
May 24, 20129.132NONO
F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; B
Sep 7, 20169.831NONO
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, de
Oct 9, 20197.528NONO

Exploit Exposure

Signals from CVEs in this product scope (39 CVEs).

CISA KEV
4 CVEs
10.3% of CVEs· 97th percentile
Metasploit
2 CVEs
5.1% of CVEs· 97th percentile
Nuclei
1 CVE
2.6% of CVEs· 96th percentile
ExploitDB
7 CVEs
17.9% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (39 CVEs).

Media Mentions

Signals from CVEs in this product scope (39 CVEs).

Top CNAs Publishing CVEs For Enterprise Manager

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
3.1.1336.66.0%24
3.1.055.78.4%13
3.0.066.14.5%02
2.3.047.237.9%02
2.2.046.927.8%02
2.1.047.237.9%02
2.017.863.1%01
1.017.863.1%01