Berkeley Db

Vendor:

First CVE: Jul 16, 2015 · Active for 11 years

Total CVEs

More Total CVEs than 98% of tracked products

10.2

Avg CVEs / Year

Higher CVE frequency than 96% of tracked products

6.8

Avg CVSS

Higher Avg CVSS than 36% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Berkeley Db over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 16, 2015

11 years ago

Most Recent CVE

Jul 15, 2020

2,201 days ago

CVE Severity & Scoring

Berkeley Db51 CVEs

43%

49%

All CVEs352,427 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local26 (51.0%)

Network0 (0.0%)

Unknown25 (49.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low6 (11.8%)

High20 (39.2%)

Unknown25 (49.0%)

User Interaction

None1 (2.0%)

Unknown25 (49.0%)

Required25 (49.0%)

Privileges Required

Low1 (2.0%)

High0 (0.0%)

None25 (49.0%)

Unknown25 (49.0%)

Top CVEs

Signals from CVEs in this product scope (51 CVEs).

51 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-3608HIGH Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticate	Apr 24, 2017	7.0	24	NO	NO
CVE-2017-3607HIGH Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticate	Apr 24, 2017	7.0	24	NO	NO
CVE-2017-3610HIGH Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticate	Apr 24, 2017	7.0	23	NO	NO
CVE-2017-3605HIGH Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticate	Apr 24, 2017	7.0	23	NO	NO
CVE-2016-0682HIGH Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to af	Apr 21, 2016	7.8	23	NO	NO
CVE-2017-3617HIGH Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticate	Apr 24, 2017	7.0	22	NO	NO
CVE-2016-3418HIGH Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to af	Apr 21, 2016	7.8	22	NO	NO
CVE-2016-0694HIGH Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to af	Apr 21, 2016	7.8	22	NO	NO
CVE-2016-0692HIGH Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to af	Apr 21, 2016	7.8	22	NO	NO
CVE-2016-0689HIGH Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to af	Apr 21, 2016	7.8	22	NO	NO

View all 51 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (51 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (51 CVEs).

Media Mentions

Signals from CVEs in this product scope (51 CVEs).

Top CNAs Publishing CVEs For Berkeley Db

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.1.6.2.32	5	7.0	0.4%
12.1.6.2.23	5	7.0	0.4%
12.1.6.1.36	5	7.0	0.4%
12.1.6.1.29	5	7.0	0.4%
12.1.6.1.26	10	7.4	0.4%
12.1.6.1.23	5	7.0	0.4%
12.1.6.0.35	30	6.7	0.4%
11.2.5.3.28	30	6.7	0.4%
11.2.5.2.42	30	6.7	0.4%
11.2.5.1.29	30	6.7	0.4%
11.2.5.0.32	5	7.8	0.4%