Vx Search

Vendor:

First CVE: Aug 31, 2017 · Active for 8 years

2

Total CVEs

More Total CVEs than 53% of tracked products

1.0

Avg CVEs / Year

Bottom 1%

8.8

Avg CVSS

Higher Avg CVSS than 80% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Vx Search over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 31, 2017

8 years ago

Most Recent CVE

Mar 16, 2023

1,229 days ago

CVE Severity & Scoring

Vx Search2 CVEs

50%

All CVEs352,785 CVEs

45%

40%

11%

HighCritical

Attack Vector

Local1 (50.0%)

Network1 (50.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low2 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None2 (100.0%)

Unknown0 (0.0%)

Required0 (0.0%)

Privileges Required

Low1 (50.0%)

High0 (0.0%)

None1 (50.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (2 CVEs).

2 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-13708CRITICAL Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.	Aug 31, 2017	9.8	46	NO	YES
CVE-2023-24671HIGH VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted	Mar 16, 2023	7.8	24	NO	NO

View all 2 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (2 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

50.0% of CVEs· 99th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (2 CVEs).

Media Mentions

Signals from CVEs in this product scope (2 CVEs).

Top CNAs Publishing CVEs For Vx Search

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
14.7	1	7.8	0.4%	0
13.8	1	7.8	0.4%	0
10.0.14	1	9.8	11.7%	1