What is the Tribe29 CNA?

Tribe29 is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 25 CVE records since 2023.

How many CVEs has Tribe29 published?

Tribe29 has published 25 CVE records, including 0 in the last two years.

What is Tribe29's CVE data quality grade?

RadicalNotion.AI grades Tribe29's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.

What products does Tribe29 publish CVEs for?

Tribe29 most frequently publishes CVEs for Checkmk, Checkmk Appliance, checkmk appliance firmware.

Which vendors does Tribe29 cover?

Tribe29 publishes CVEs across 2 distinct vendors, most often Tribe29, Checkmk GmbH.

Is Tribe29 actively publishing CVEs?

Tribe29 is currently inactive (has not published recently), based on 0 CVEs in the last two years.

What is the average severity of Tribe29's CVEs?

The average CVSS base score across Tribe29's scored CVEs is 6.4.

How many critical CVEs has Tribe29 published?

Tribe29 has published 2 critical-severity CVEs and 9 high-severity CVEs.

What are the most common weakness types in Tribe29's CVEs?

Tribe29's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-203 (Observable Discrepancy).

How does Tribe29 rank among CNAs?

By total CVE volume, Tribe29 ranks #227 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Grade A

Inactive

Tribe29

Name: Tribe29 CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published August 10, 2023

25

CVEs published

Total assigned

0.6

Years active

2023–2023

6.4

Avg CVSS

Across scored CVEs

0

Recent CVEs

Last 2 years

Overview

Tribe29 is a CVE Numbering Authority that has published 25 CVE records since 2023. It is currently classified as inactive, with 0 CVEs published in the last two years. Its CVE data quality is graded A (100% overall completeness).

Among the 370 CNAs tracked here, Tribe29 ranks #227 by CVE volume and reports more complete records than 60% of all CNAs.

Data quality report card

How complete and consistent Tribe29's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often Tribe29 also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

A

100%

Overall score

Overall completeness100%

Vendor completeness100%

Product completeness100%

CVSS completeness100%

CWE completeness100%

100%

Update rate

Records revised after publishing

2

Vendor diversity

Distinct vendors covered

193 chars

Avg description length

Per CVE record

2023-01-09

First CVE date

Earliest assignment

2023-08-10

Latest CVE date

Most recent assignment

6.4

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of Tribe29's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical2

High9

Medium14

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tribe29's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories Tribe29 most often assigns to its CVEs. Follow any weakness to its full explanation.

Top vendors

The vendors Tribe29 publishes the most CVEs for.

Tribe2924 CVEs
Checkmk GmbH21 CVEs

Top products

The products Tribe29 publishes the most CVEs for.

Checkmk22 CVEs
Checkmk Appliance4 CVEs
checkmk appliance firmware3 CVEs

Latest CVEs

The most recent CVEs assigned by Tribe29.

CVE-2023-31209CWE-78
Command injection via active checks and REST API
High · CVSS 8.8
EPSS 1.0%2023-08-10
CVE-2023-23548CWE-80
Medium · CVSS 6.1
EPSS 0.4%2023-08-01
CVE-2023-22359CWE-203
Medium · CVSS 4.3
EPSS 0.5%2023-06-26
CVE-2023-22348CWE-285
Reading host_configs does not honour contact groups
Medium · CVSS 4.3
EPSS 0.6%2023-05-17
CVE-2023-31208CWE-140
High · CVSS 8.8
EPSS 1.0%2023-05-17
CVE-2023-22318CWE-412
High · CVSS 7.5
EPSS 0.5%2023-05-15
CVE-2023-31207CWE-532
Medium · CVSS 5.5
EPSS 0.2%2023-05-02
CVE-2022-46302CWE-829
High · CVSS 8.8
EPSS 0.4%2023-04-20
CVE-2023-22309CWE-80
Medium · CVSS 6.1
EPSS 0.4%2023-04-20
CVE-2023-22294CWE-732
High · CVSS 8.8
EPSS 0.7%2023-04-18
CVE-2023-22307CWE-598
Medium · CVSS 5.5
EPSS 0.2%2023-04-18
CVE-2023-2020CWE-280
Medium · CVSS 4.3
EPSS 0.4%2023-04-18

Track new Tribe29 CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor Tribe29 CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the Tribe29 CNA.

What is the Tribe29 CNA?: Tribe29 is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 25 CVE records since 2023.
How many CVEs has Tribe29 published?: Tribe29 has published 25 CVE records, including 0 in the last two years.
What is Tribe29's CVE data quality grade?: RadicalNotion.AI grades Tribe29's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.
What products does Tribe29 publish CVEs for?: Tribe29 most frequently publishes CVEs for Checkmk, Checkmk Appliance, checkmk appliance firmware.
Which vendors does Tribe29 cover?: Tribe29 publishes CVEs across 2 distinct vendors, most often Tribe29, Checkmk GmbH.
Is Tribe29 actively publishing CVEs?: Tribe29 is currently inactive (has not published recently), based on 0 CVEs in the last two years.
What is the average severity of Tribe29's CVEs?: The average CVSS base score across Tribe29's scored CVEs is 6.4.
How many critical CVEs has Tribe29 published?: Tribe29 has published 2 critical-severity CVEs and 9 high-severity CVEs.
Are any of Tribe29's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of Tribe29's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in Tribe29's CVEs?: Tribe29's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-203 (Observable Discrepancy).
How does Tribe29 rank among CNAs?: By total CVE volume, Tribe29 ranks #227 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track Tribe29 CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing