How many CVEs does 4D have?

4D has 14 published CVE records since 2002, including 1 in the last two years.

How many 4D CVEs are in CISA KEV?

None of 4D's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which 4D products have the most CVEs?

The 4D products with the most published CVEs are webstar, server, 4D Server, 4d, webstar http server.

What are the most common weakness types in 4D CVEs?

4D's CVEs most often map to these CWE weakness types: CWE-427 (Uncontrolled Search Path Element), CWE-476 (NULL Pointer Dereference), CWE-611 (Improper Restriction of XML External Entity Reference).

Are there public exploits for 4D vulnerabilities?

Yes — 4 of 4D's CVEs have a known public exploit.

What is the average severity of 4D CVEs?

The average CVSS base score across 4D's scored CVEs is 6.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

14 CVEs

4D Vulnerabilities

Name: 4D vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for 4D.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

6.1

Avg CVSS

2002–2026

Overview

4D has 14 published CVE records since 2002, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting 4D products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on 4D's vulnerability posture, as a share of its 14 published CVEs.

Average CVSS

6.1

across 14 scored CVEs

Critical / high

43%

6 of 14 scored

Actively exploited (KEV)

0%

0 of 14 CVEs

Public exploit available

29%

4 of 14 CVEs

Patch available

29%

4 of 14 CVEs

Severity and exploitation

How the CVSS severity of 4D's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High6

Medium7

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of 4D's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of 4D's CVEs have a known public exploit available.

Most affected products

The 4D products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in 4D CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish 4D CVE records.

Disclosure activity by year

How many 4D CVEs were published each year.

2002

1

2004

7

2005

2

2023

3

2026

1

Latest 4D CVEs

The most recently disclosed vulnerabilities affecting 4D.

Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP
CWE-611
High · CVSS 8.7
EPSS 0.4%2026-04-30
High vulnerability · 2023-11-30
CWE-427
High · CVSS 7.8
EPSS 0.3%2023-11-30
High vulnerability · 2023-06-16
High · CVSS 7.5
EPSS 1.2%2023-06-16
High vulnerability · 2023-06-16
High · CVSS 7.5
EPSS 1.1%2023-06-16
Medium vulnerability · 2005-10-05
Medium · CVSS 5.0
EPSS 1.3%2005-10-05
Medium vulnerability · 2005-05-11
Medium · CVSS 5.0
EPSS 5.7%2005-05-11
Medium vulnerability · 2004-07-16
Medium · CVSS 5.0
EPSS 1.4%2004-07-16
Low vulnerability · 2004-07-16
Low · CVSS 3.6
EPSS 0.3%2004-07-16
Medium vulnerability · 2004-07-16
Medium · CVSS 5.0
EPSS 1.4%2004-07-16
High vulnerability · 2004-07-16
High · CVSS 7.5
EPSS 38.2%2004-07-16
High vulnerability · 2004-03-18
CWE-476
High · CVSS 7.5
EPSS 9.5%2004-03-18
Medium vulnerability · 2004-03-18
Medium · CVSS 5.0
EPSS 7.2%2004-03-18

Track new 4D CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor 4D CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft26,173 CVEs linux21,519 CVEs Google16,121 CVEs Apple15,020 CVEs Oracle11,815 CVEs Debian10,224 CVEs IBM8,549 CVEs Red Hat8,002 CVEs

Browse all vendors

Frequently asked questions

Common questions about 4D vulnerabilities.

How many CVEs does 4D have?: 4D has 14 published CVE records since 2002, including 1 in the last two years.
How many 4D CVEs are in CISA KEV?: None of 4D's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which 4D products have the most CVEs?: The 4D products with the most published CVEs are webstar, server, 4D Server, 4d, webstar http server.
What are the most common weakness types in 4D CVEs?: 4D's CVEs most often map to these CWE weakness types: CWE-427 (Uncontrolled Search Path Element), CWE-476 (NULL Pointer Dereference), CWE-611 (Improper Restriction of XML External Entity Reference).
Are there public exploits for 4D vulnerabilities?: Yes — 4 of 4D's CVEs have a known public exploit.
What is the average severity of 4D CVEs?: The average CVSS base score across 4D's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track 4D vulnerabilities

Monitor new 4D vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing