Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Marvell

First CVE: Sep 5, 2008Active for: 18 yearsTotal CVEs: 40
53.3
VTI Score
TOP TARGET

Marvell manufactures storage controllers and firmware for solid-state drives and data-center storage appliances, a moderately represented but strategically important component category that sits between enterprise systems and persistent storage. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, though the exposure does not show a pronounced tendency toward public exploit availability or confirmed in-the-wild exploitation. The recurring weakness classes center on path traversal, input validation, out-of-bounds writes, and unrestricted file uploads, typical of firmware and management-console attack surfaces where parsing logic and access boundaries are security-critical. Defenders should prioritize Marvell advisories affecting storage infrastructure, particularly the 88SS firmware family and QConverge management console, given the vendor's placement in the I/O path and the potential for supply-chain impact. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
40
Total CVEs
More Total CVEs than 98% of tracked vendors
0.1
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 1% of tracked vendors
8.1
Avg CVSS Score
Higher Avg CVSS Score than 79% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Marvell over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 5, 2008
17 years ago
Most Recent CVE
Jul 31, 2025
358 days ago

Products(59 total)

Top CVEs

Signals from CVEs in this vendor scope (40 CVEs).

40 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-15643HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit
Aug 25, 20208.859NONO
CVE-2025-6793CRITICAL
Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. This vulnerability allows remote attackers to dele
Jul 7, 20259.447NOYES
CVE-2025-8426CRITICAL
Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose
Jul 31, 20259.434NONO
CVE-2020-15645HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit
Aug 25, 20208.832NONO
CVE-2025-6802CRITICAL
Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect
Jul 7, 20259.830NONO
CVE-2025-6794CRITICAL
Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal
Jul 7, 20259.830NONO
CVE-2019-13581CRITICAL
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive
Nov 15, 20199.830NONO
CVE-2020-17388HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit
Aug 25, 20208.829NONO
CVE-2020-15644HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit
Aug 25, 20208.829NONO
CVE-2020-15642HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is req
Aug 25, 20208.829NONO
View all 40 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products40 CVEs
13%
65%
23%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network32 (80.0%)
Unknown5 (12.5%)
Physical2 (5.0%)
Adjacent Network1 (2.5%)
Attack Complexity
Low35 (87.5%)
High0 (0.0%)
Unknown5 (12.5%)
User Interaction
None35 (87.5%)
Unknown5 (12.5%)
Required0 (0.0%)
Privileges Required
Low10 (25.0%)
High0 (0.0%)
None25 (62.5%)
Unknown5 (12.5%)

Exploit Exposure

Signals from CVEs in this vendor scope (40 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
2.5% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Marvell.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Marvell — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Marvell's Products

View all 3 CNAs →

Top CWEs