Enterprise Linux Server From Rhui

Vendor:

First CVE: Jun 16, 2012 · Active for 14 years

12
Total CVEs
More Total CVEs than 91% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 64% of tracked products
75.0%
KEV Rate
Higher KEV Rate than 99% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Enterprise Linux Server From Rhui over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 16, 2012
14 years ago
Most Recent CVE
May 11, 2016
3,729 days ago

CVE Severity & Scoring

Enterprise Linux Server From Rhui12 CVEs
All CVEs352,785 CVEs
LowMediumHighCritical
Attack Vector
Local3 (25.0%)
Network6 (50.0%)
Unknown3 (25.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (75.0%)
High0 (0.0%)
Unknown3 (25.0%)
User Interaction
None6 (50.0%)
Unknown3 (25.0%)
Required3 (25.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None9 (75.0%)
Unknown3 (25.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2014-6271CRITICAL
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
CVE-2016-4117CRITICAL
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
May 11, 20169.898YESYES
CVE-2015-5119CRITICAL
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows
Jul 8, 20159.898YESYES
CVE-2014-7169CRITICAL
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES
CVE-2015-3043CRITICAL
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 20159.897YESYES
CVE-2016-3718MEDIUM
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima
May 5, 20165.593YESYES
CVE-2016-3715MEDIUM
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
May 5, 20165.593YESYES
CVE-2015-7645HIGH
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code
Oct 15, 20157.893YESYES
CVE-2015-4902MEDIUM
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Oct 22, 20155.357YESNO
CVE-2015-5165HIGH
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecifie
Aug 12, 20159.328NONO
View all 12 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV
9 CVEs
75.0% of CVEs· 99th percentile
Metasploit
4 CVEs
33.3% of CVEs· 98th percentile
Nuclei
1 CVE
8.3% of CVEs· 97th percentile
ExploitDB
9 CVEs
75.0% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Enterprise Linux Server From Rhui

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
7.077.454.4%55
6.0117.765.1%98
5.078.978.5%76