What is the Zowe CNA?

Zowe is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 7 CVE records since 2023.

How many CVEs has Zowe published?

Zowe has published 7 CVE records, including 5 in the last two years.

What is Zowe's CVE data quality grade?

RadicalNotion.AI grades Zowe's CVE data quality as B, with an overall completeness score of 85.7%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (85.7%), and CWE (57.1%) information.

What products does Zowe publish CVEs for?

Zowe most frequently publishes CVEs for Zowe, api-layer, zowe_api_mediation_layer, zowe-cli, Zowe CLI - Imperative.

Which vendors does Zowe cover?

Zowe publishes CVEs across 1 distinct vendors, most often Open Mainframe Project, zowe, Linux Foundation.

Is Zowe actively publishing CVEs?

Zowe is currently active, based on 5 CVEs in the last two years.

What is the average severity of Zowe's CVEs?

The average CVSS base score across Zowe's scored CVEs is 5.8.

How many critical CVEs has Zowe published?

Zowe has published 1 critical-severity CVEs and 1 high-severity CVEs.

What are the most common weakness types in Zowe's CVEs?

Zowe's CVEs most often map to these CWE weakness types: CWE-312 (Cleartext Storage of Sensitive Information), CWE-250 (Execution with Unnecessary Privileges), CWE-269 (Improper Privilege Management).

How does Zowe rank among CNAs?

By total CVE volume, Zowe ranks #334 of 370 CNAs, and it reports more complete CVE records than 32% of all CNAs.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Grade B

Active

Zowe

Name: Zowe CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published October 10, 2024

7

CVEs published

Total assigned

1.7

Years active

2023–2024

5.8

Avg CVSS

Across scored CVEs

5

Recent CVEs

Last 2 years

Overview

Zowe is a CVE Numbering Authority that has published 7 CVE records since 2023. It is currently classified as active, with 5 CVEs published in the last two years. Its CVE data quality is graded B (85.7% overall completeness).

Among the 370 CNAs tracked here, Zowe ranks #334 by CVE volume and reports more complete records than 32% of all CNAs.

Data quality report card

How complete and consistent Zowe's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often Zowe also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

B

85.7%

Overall score

Overall completeness85.7%

Vendor completeness100%

Product completeness100%

CVSS completeness85.7%

CWE completeness57.1%

100%

Update rate

Records revised after publishing

1

Vendor diversity

Distinct vendors covered

278 chars

Avg description length

Per CVE record

2023-01-18

First CVE date

Earliest assignment

2024-10-10

Latest CVE date

Most recent assignment

5.8

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of Zowe's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical1

High1

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Zowe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories Zowe most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs Zowe has published each year.

2023

2

2024

5

Top vendors

The vendors Zowe publishes the most CVEs for.

Open Mainframe Project7 CVEs
zowe7 CVEs
Linux Foundation5 CVEs

Top products

The products Zowe publishes the most CVEs for.

Zowe6 CVEs
api-layer5 CVEs
zowe_api_mediation_layer4 CVEs
zowe-cli1 CVEs
Zowe CLI - Imperative1 CVEs
@zowe/imperative1 CVEs
@zowe/cli1 CVEs
zowe cli1 CVEs

Latest CVEs

The most recent CVEs assigned by Zowe.

CVE-2024-9802CWE-312
Conformance validation endpoint discloses detail about service to unauthenticated users
Medium · CVSS 5.3
EPSS 0.2%2024-10-10
CVE-2024-9798CWE-312
Health endpoint offers list of onboarded services to unauthenticated users
Medium · CVSS 5.3
EPSS 0.2%2024-10-10
CVE-2024-6916
Medium · CVSS 5.9
EPSS 0.1%2024-07-19
CVE-2024-6834CWE-250
Critical · CVSS 9.0
EPSS 0.3%2024-07-17
CVE-2024-6833
Medium · CVSS 5.9
EPSS 0.1%2024-07-17
CVE-2021-4326
High · CVSS 7.8
EPSS 0.3%2023-02-22
CVE-2021-4314CWE-269
Medium · CVSS 5.3
EPSS 0.4%2023-01-18

Track new Zowe CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor Zowe CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the Zowe CNA.

What is the Zowe CNA?: Zowe is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 7 CVE records since 2023.
How many CVEs has Zowe published?: Zowe has published 7 CVE records, including 5 in the last two years.
What is Zowe's CVE data quality grade?: RadicalNotion.AI grades Zowe's CVE data quality as B, with an overall completeness score of 85.7%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (85.7%), and CWE (57.1%) information.
What products does Zowe publish CVEs for?: Zowe most frequently publishes CVEs for Zowe, api-layer, zowe_api_mediation_layer, zowe-cli, Zowe CLI - Imperative.
Which vendors does Zowe cover?: Zowe publishes CVEs across 1 distinct vendors, most often Open Mainframe Project, zowe, Linux Foundation.
Is Zowe actively publishing CVEs?: Zowe is currently active, based on 5 CVEs in the last two years.
What is the average severity of Zowe's CVEs?: The average CVSS base score across Zowe's scored CVEs is 5.8.
How many critical CVEs has Zowe published?: Zowe has published 1 critical-severity CVEs and 1 high-severity CVEs.
Are any of Zowe's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of Zowe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in Zowe's CVEs?: Zowe's CVEs most often map to these CWE weakness types: CWE-312 (Cleartext Storage of Sensitive Information), CWE-250 (Execution with Unnecessary Privileges), CWE-269 (Improper Privilege Management).
How does Zowe rank among CNAs?: By total CVE volume, Zowe ranks #334 of 370 CNAs, and it reports more complete CVE records than 32% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track Zowe CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing