Enterprise Linux Server Supplementary Eus

Vendor:

First CVE: Jan 15, 2014 · Active for 12 years

83
Total CVEs
More Total CVEs than 99% of tracked products
27.7
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 49% of tracked products
2.4%
KEV Rate
Higher KEV Rate than 98% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Enterprise Linux Server Supplementary Eus over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 15, 2014
12 years ago
Most Recent CVE
May 14, 2016
3,727 days ago

CVE Severity & Scoring

Enterprise Linux Server Supplementary Eus83 CVEs
All CVEs353,173 CVEs
LowMediumHighCritical
Attack Vector
Local4 (4.8%)
Network9 (10.8%)
Unknown70 (84.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (15.7%)
High0 (0.0%)
Unknown70 (84.3%)
User Interaction
None5 (6.0%)
Unknown70 (84.3%)
Required8 (9.6%)
Privileges Required
Low2 (2.4%)
High0 (0.0%)
None11 (13.3%)
Unknown70 (84.3%)

Top CVEs

Signals from CVEs in this product scope (83 CVEs).

83 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2016-3718MEDIUM
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima
May 5, 20165.593YESYES
CVE-2016-3715MEDIUM
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
May 5, 20165.593YESYES
CVE-2015-3042HIGH
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 201510.061NOYES
CVE-2016-3717MEDIUM
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
May 5, 20165.540NOYES
CVE-2015-0358HIGH
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers t
Apr 14, 201510.033NONO
CVE-2015-3041HIGH
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 201510.032NONO
CVE-2016-1666CRITICAL
Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
May 14, 20169.831NONO
CVE-2015-3038HIGH
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 201510.031NONO
CVE-2015-0353HIGH
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 201510.031NONO
CVE-2015-0347HIGH
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or caus
Apr 14, 201510.031NONO
View all 83 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (83 CVEs).

CISA KEV
2 CVEs
2.4% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
6.0% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (83 CVEs).

Media Mentions

Signals from CVEs in this product scope (83 CVEs).

Top CNAs Publishing CVEs For Enterprise Linux Server Supplementary Eus

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
6.7.z19.81.0%00
6.7z286.78.0%24
6.6.z487.84.4%01
6.5.z65.55.5%00