Cloud Secure Agent
Vendor:
First CVE: Jul 26, 2019 · Active for 6 years
57
Total CVEs
More Total CVEs than 98% of tracked products
14.3
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 14% of tracked products
1.8%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Cloud Secure Agent over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 26, 2019
6 years ago
Most Recent CVE
Oct 18, 2022
1,375 days ago
CVE Severity & Scoring
Cloud Secure Agent57 CVEs
25%
58%
14%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (1.8%)
Network56 (98.2%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low37 (64.9%)
High20 (35.1%)
Unknown0 (0.0%)
User Interaction
None54 (94.7%)
Unknown0 (0.0%)
Required3 (5.3%)
Privileges Required
Low3 (5.3%)
High1 (1.8%)
None53 (93.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (57 CVEs).
57 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44228CRITICAL Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect agai | Dec 10, 2021 | 10.0 | 99 | YES | YES |
CVE-2022-34169HIGH The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated b | Jul 19, 2022 | 7.5 | 42 | NO | NO |
CVE-2019-13990CRITICAL initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. | Jul 26, 2019 | 9.8 | 40 | NO | NO |
CVE-2022-21476HIGH Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u | Apr 19, 2022 | 7.5 | 27 | NO | NO |
CVE-2022-1319HIGH A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the | Aug 31, 2022 | 7.5 | 26 | NO | NO |
CVE-2020-14593HIGH Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE | Jul 15, 2020 | 7.4 | 26 | NO | NO |
CVE-2022-1259HIGH A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exis | Aug 31, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-3859HIGH A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks | Aug 26, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-22971MEDIUM In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack b | May 12, 2022 | 6.5 | 23 | NO | NO |
CVE-2022-21299MEDIUM Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, | Jan 19, 2022 | 5.3 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (57 CVEs).
CISA KEV
1 CVE
1.8% of CVEs· 96th percentile
Metasploit
1 CVE
1.8% of CVEs· 96th percentile
Nuclei
1 CVE
1.8% of CVEs· 96th percentile
ExploitDB
1 CVE
1.8% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (57 CVEs).
Media Mentions
Signals from CVEs in this product scope (57 CVEs).
Top CNAs Publishing CVEs For Cloud Secure Agent
Top CWEs
Versions
No cataloged versions.