Rdiffweb
Vendor:
First CVE: Sep 8, 2022 · Active for 3 years
42
Total CVEs
More Total CVEs than 97% of tracked products
21.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Rdiffweb over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 8, 2022
3 years ago
Most Recent CVE
Sep 29, 2023
1,029 days ago
CVE Severity & Scoring
Rdiffweb42 CVEs
38%
31%
26%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network41 (97.6%)
Unknown0 (0.0%)
Physical1 (2.4%)
Adjacent Network0 (0.0%)
Attack Complexity
Low42 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None29 (69.0%)
Unknown0 (0.0%)
Required13 (31.0%)
Privileges Required
Low5 (11.9%)
High2 (4.8%)
None35 (83.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-4724CRITICAL Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. | Dec 27, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-3363CRITICAL Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. | Oct 26, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-3269CRITICAL Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7. | Sep 23, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-3362CRITICAL Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. | Nov 14, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3327CRITICAL Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. | Oct 20, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3439CRITICAL Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. | Oct 14, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3457CRITICAL Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. | Oct 13, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3456CRITICAL Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. | Oct 13, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-4314CRITICAL Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. | Dec 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-3273CRITICAL Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | Oct 6, 2022 | 9.8 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Rdiffweb
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.5.0 | 9 | 7.9 | 0.7% | 0 | 0 |
| 2.4.6 | 1 | 4.3 | 0.3% | 0 | 0 |
| 2.4.10 | 1 | 9.8 | 0.8% | 0 | 0 |