Vendor:
First CVE: Feb 8, 2008 · Active for 18 years
4
Total CVEs
More Total CVEs than 72% of tracked products
1.3
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 60% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Facebook over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 8, 2008
18 years ago
Most Recent CVE
Apr 12, 2021
1,930 days ago
CVE Severity & Scoring
Facebook4 CVEs
25%
75%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network2 (50.0%)
Unknown2 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (25.0%)
High1 (25.0%)
Unknown2 (50.0%)
User Interaction
None1 (25.0%)
Unknown2 (50.0%)
Required1 (25.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None2 (50.0%)
Unknown2 (50.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-0660HIGH Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Face | Feb 8, 2008 | 9.3 | 58 | NO | YES |
CVE-2021-24218HIGH The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protecti | Apr 12, 2021 | 8.8 | 26 | NO | NO |
CVE-2021-24217HIGH The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injec | Apr 12, 2021 | 8.1 | 26 | NO | NO |
CVE-2014-6392MEDIUM Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a c | Sep 15, 2014 | 4.3 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
25.0% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Facebook
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 14.0 | 1 | 4.3 | 0.9% | 0 | 0 |