What is the FSI CNA?
FSI is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 12 CVE records since 2025.
How many CVEs has FSI published?
FSI has published 12 CVE records, including 12 in the last two years.
What is FSI's CVE data quality grade?
RadicalNotion.AI grades FSI's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.
What products does FSI publish CVEs for?
FSI most frequently publishes CVEs for Web Fax, ChangeFlow, Innorix WP, DestinyECM, ActADUR.
Which vendors does FSI cover?
FSI publishes CVEs across 8 distinct vendors, most often Gmission, GTONE, Innorix, MarkAny, Cyberdigm.
Is FSI actively publishing CVEs?
FSI is currently active, based on 12 CVEs in the last two years.
What is the average severity of FSI's CVEs?
The average CVSS base score across FSI's scored CVEs is 7.7.
How many critical CVEs has FSI published?
FSI has published 2 critical-severity CVEs and 8 high-severity CVEs.
Are any of FSI's CVEs in CISA's Known Exploited Vulnerabilities catalog?
No. None of FSI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in FSI's CVEs?
FSI's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-862 (Missing Authorization), CWE-311 (Missing Encryption of Sensitive Data), CWE-352 (Cross-Site Request Forgery (CSRF)).
How does FSI rank among CNAs?
By total CVE volume, FSI ranks #286 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.
