Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Openlinksw

First CVE: May 15, 2023Active for: 3 yearsTotal CVEs: 63
45.2
VTI Score
High

Openlinksw maintains Virtuoso, a widely embedded data management and semantic-web platform that integrates database, middleware, and linked-data functionality into enterprise and analytics environments. The vendor's vulnerability footprint, though concentrated in a single product, carries outsized relevance because Virtuoso's role as middleware and data-integration layer means individual flaws can propagate across dependent applications and workflows. The recurring weakness classes center on input-handling and resource-management issues—particularly SQL injection, resource exhaustion, and improper cleanup—that are characteristic of complex, integration-heavy database platforms exposed to untrusted or high-volume query input. Defenders should monitor Virtuoso deployments in data pipelines and business-intelligence layers and treat input validation and resource limits as focal points for hardening; current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
63
Total CVEs
More Total CVEs than 99% of tracked vendors
31.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 100% of tracked vendors
7.5
Avg CVSS Score
Higher Avg CVSS Score than 57% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Openlinksw over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 15, 2023
3 years ago
Most Recent CVE
Jan 14, 2025
556 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (63 CVEs).

63 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-31631HIGH
An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31630HIGH
An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31629HIGH
An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31628HIGH
An issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31625HIGH
An issue in the psiginfo component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31624HIGH
An issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31623HIGH
An issue in the mp_box_copy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31622HIGH
An issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31621HIGH
An issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
CVE-2023-31619HIGH
An issue in the sch_name_to_object component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
May 15, 20237.524NONO
View all 63 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products63 CVEs
100%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
High
Attack Vector
Local0 (0.0%)
Network63 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low63 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None63 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None63 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (63 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Openlinksw.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Openlinksw — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Openlinksw's Products

View all 1 CNAs →

Top CWEs