Evergreen

Vendor:

First CVE: Mar 24, 2014 · Active for 12 years

43
Total CVEs
More Total CVEs than 97% of tracked products
14.3
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 60% of tracked products
20.9%
KEV Rate
Higher KEV Rate than 98% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Evergreen over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 24, 2014
12 years ago
Most Recent CVE
May 11, 2016
3,726 days ago

CVE Severity & Scoring

Evergreen43 CVEs
All CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local10 (23.3%)
Network10 (23.3%)
Unknown23 (53.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (46.5%)
High0 (0.0%)
Unknown23 (53.5%)
User Interaction
None15 (34.9%)
Unknown23 (53.5%)
Required5 (11.6%)
Privileges Required
Low6 (14.0%)
High0 (0.0%)
None14 (32.6%)
Unknown23 (53.5%)

Top CVEs

Signals from CVEs in this product scope (43 CVEs).

43 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2016-4117CRITICAL
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
May 11, 20169.898YESYES
CVE-2015-5122CRITICAL
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 1
Jul 14, 20159.898YESYES
CVE-2015-5119CRITICAL
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows
Jul 8, 20159.898YESYES
CVE-2015-3113CRITICAL
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attack
Jun 23, 20159.898YESYES
CVE-2015-0313CRITICAL
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta
Feb 2, 20159.898YESYES
CVE-2015-3043CRITICAL
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 20159.897YESYES
CVE-2015-7645HIGH
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code
Oct 15, 20157.893YESYES
CVE-2015-8651HIGH
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adob
Dec 28, 20158.892YESNO
CVE-2014-0569HIGH
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adob
Oct 15, 20149.391NOYES
CVE-2015-5123CRITICAL
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0
Jul 14, 20159.876YESNO
View all 43 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (43 CVEs).

CISA KEV
9 CVEs
20.9% of CVEs· 98th percentile
Metasploit
7 CVEs
16.3% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
17 CVEs
39.5% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (43 CVEs).

Media Mentions

Signals from CVEs in this product scope (43 CVEs).

Top CNAs Publishing CVEs For Evergreen

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
11.4437.628.3%917