Virtualization

Vendor:

First CVE: Oct 18, 2011 · Active for 14 years

23

Total CVEs

More Total CVEs than 95% of tracked products

3.3

Avg CVEs / Year

Higher CVE frequency than 82% of tracked products

4.9

Avg CVSS

Higher Avg CVSS than 7% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Virtualization over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 18, 2011

14 years ago

Most Recent CVE

May 26, 2021

1,885 days ago

CVE Severity & Scoring

Virtualization23 CVEs

22%

70%

9%

All CVEs352,294 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local1 (4.3%)

Network1 (4.3%)

Unknown21 (91.3%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (4.3%)

High1 (4.3%)

Unknown21 (91.3%)

User Interaction

None1 (4.3%)

Unknown21 (91.3%)

Required1 (4.3%)

Privileges Required

Low1 (4.3%)

High0 (0.0%)

None1 (4.3%)

Unknown21 (91.3%)

Top CVEs

Signals from CVEs in this product scope (23 CVEs).

23 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2014-0230HIGH Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire requ	Jun 7, 2015	7.8	28	NO	NO
CVE-2012-3221LOW Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to	Oct 17, 2012	2.1	22	NO	YES
CVE-2011-3538MEDIUM Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication. NOTE: this identifier was i	Oct 18, 2011	6.8	21	NO	NO
CVE-2021-20191MEDIUM A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker c	May 26, 2021	5.5	19	NO	NO
CVE-2014-2475MEDIUM Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors	Oct 15, 2014	5.0	19	NO	NO
CVE-2014-2473MEDIUM Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to S	Oct 15, 2014	5.0	19	NO	NO
CVE-2013-3779HIGH Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect co	Jul 17, 2013	7.5	19	NO	NO
CVE-2015-2581MEDIUM Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via	Jul 16, 2015	6.4	18	NO	NO
CVE-2014-6459MEDIUM Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to S	Oct 15, 2014	5.0	18	NO	NO
CVE-2014-2474MEDIUM Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to S	Oct 15, 2014	5.0	18	NO	NO

View all 23 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (23 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

4.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (23 CVEs).

Media Mentions

Signals from CVEs in this product scope (23 CVEs).

Top CNAs Publishing CVEs For Virtualization

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
5.2	1	6.4	2.2%	0
5.1	11	5.4	3.3%	0
5.0	10	5.0	1.5%	0
4.71	4	5.3	6.4%	0
4.7	2	5.9	1.5%	0
4.63	5	5.8	5.5%	0
4.62	1	7.5	1.6%	0
4.61	1	7.5	1.6%	0
4.6	3	5.4	1.5%	0
4.2	1	2.4	0.4%	0
4.1	4	3.0	0.5%	1
4.0	5	4.4	1.1%	1
3.2	2	2.9	1.2%	1