Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Kemptechnologies

First CVE: Dec 19, 2017Active for: 9 yearsTotal CVEs: 5

Kemptechnologies develops a focused line of load-balancing and web-application security appliances, including products such as LoadMaster and its web-application firewall, that sit in the critical path of application delivery and are deployed across enterprise networks. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit code, reflecting the internet-facing nature of these devices and the access they command; the recurring weakness classes—including cross-site request forgery, cross-site scripting, injection flaws, and OS command injection—point to input-validation and output-encoding gaps characteristic of appliance web interfaces and configuration systems. Defenders should treat this vendor's security advisories as high-priority for internet-exposed instances; current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
5
Total CVEs
More Total CVEs than 83% of tracked vendors
0.2
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 1% of tracked vendors
8.2
Avg CVSS Score
Higher Avg CVSS Score than 80% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Kemptechnologies over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 19, 2017
8 years ago
Most Recent CVE
Sep 5, 2024
691 days ago

Products(5 total)

Top CVEs

Signals from CVEs in this vendor scope (5 CVEs).

5 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-7591HIGH
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenan
Sep 5, 20247.260NOYES
CVE-2014-5288HIGH
A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.
Feb 7, 20208.836NOYES
CVE-2018-9091CRITICAL
A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could
May 25, 20189.828NONO
CVE-2017-15524CRITICAL
The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP
Dec 19, 20179.128NONO
CVE-2021-41823MEDIUM
The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.
Jan 1, 20236.121NONO
View all 5 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products5 CVEs
20%
40%
40%
Severity distribution among all CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network5 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (60.0%)
Unknown0 (0.0%)
Required2 (40.0%)
Privileges Required
Low0 (0.0%)
High1 (20.0%)
None4 (80.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (5 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
20.0% of CVEs· 97th percentile
ExploitDB
1 CVE
20.0% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Kemptechnologies.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Kemptechnologies — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Kemptechnologies's Products

View all 2 CNAs →

Top CWEs