Linux Enterprise Software Development Kit

Vendor:

First CVE: Dec 4, 2007 · Active for 18 years

302
Total CVEs
More Total CVEs than 100% of tracked products
20.1
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
3.6%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Linux Enterprise Software Development Kit over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 4, 2007
18 years ago
Most Recent CVE
Sep 29, 2022
1,394 days ago

CVE Severity & Scoring

Linux Enterprise Software Development Kit302 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local34 (11.3%)
Network51 (16.9%)
Unknown216 (71.5%)
Physical1 (0.3%)
Adjacent Network0 (0.0%)
Attack Complexity
Low78 (25.8%)
High8 (2.6%)
Unknown216 (71.5%)
User Interaction
None60 (19.9%)
Unknown216 (71.5%)
Required26 (8.6%)
Privileges Required
Low13 (4.3%)
High3 (1.0%)
None70 (23.2%)
Unknown216 (71.5%)

Top CVEs

Signals from CVEs in this product scope (302 CVEs).

302 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2014-6271CRITICAL
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
CVE-2012-1823CRITICAL
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign)
May 11, 20129.899YESYES
CVE-2014-7169CRITICAL
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES
CVE-2013-2465CRITICAL
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and Ope
Jun 18, 20139.898YESYES
CVE-2012-0507CRITICAL
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows re
Jun 7, 20129.898YESYES
CVE-2015-4495HIGH
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitr
Aug 8, 20158.896YESYES
CVE-2013-1690HIGH
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in c
Jun 26, 20138.896YESYES
CVE-2016-3427CRITICAL
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and avai
Apr 21, 20169.895YESNO
CVE-2016-3718MEDIUM
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima
May 5, 20165.593YESYES
CVE-2016-3715MEDIUM
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
May 5, 20165.593YESYES
View all 302 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (302 CVEs).

CISA KEV
11 CVEs
3.6% of CVEs· 97th percentile
Metasploit
13 CVEs
4.3% of CVEs· 96th percentile
Nuclei
3 CVEs
1.0% of CVEs· 96th percentile
ExploitDB
30 CVEs
9.9% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (302 CVEs).

Media Mentions

Signals from CVEs in this product scope (302 CVEs).

Top CNAs Publishing CVEs For Linux Enterprise Software Development Kit

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
12.039.123.8%01
121156.615.1%78
11.038.738.6%02
111897.213.9%1120
10947.011.1%217