How many CVEs does 9001 have?

9001 has 12 published CVE records since 2023, including 10 in the last two years.

How many 9001 CVEs are in CISA KEV?

None of 9001's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which 9001 products have the most CVEs?

The 9001 products with the most published CVEs are copyparty.

What are the most common weakness types in 9001 CVEs?

9001's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption), CWE-83 (Improper Neutralization of Script in Attributes in a Web Page).

Are there public exploits for 9001 vulnerabilities?

Yes — 7 of 9001's CVEs have a known public exploit.

What is the average severity of 9001 CVEs?

The average CVSS base score across 9001's scored CVEs is 5.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

12 CVEs

9001 Vulnerabilities

Name: 9001 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for 9001.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

7

Public exploits

PoC or exploit code

5.9

Avg CVSS

2023–2026

Overview

9001 has 12 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting 9001 products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on 9001's vulnerability posture, as a share of its 12 published CVEs.

Average CVSS: 5.9
Critical / high: 25%
Actively exploited (KEV): 0%
Public exploit available: 58%
Patch available: 100%

Severity and exploitation

How the CVSS severity of 9001's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium8

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of 9001's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7

7 of 9001's CVEs have a known public exploit available.

Most affected products

The 9001 products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

copyparty12 CVEs

Common weakness types

The CWE weakness categories most often found in 9001 CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish 9001 CVE records.

Disclosure activity by year

How many 9001 CVEs were published each year.

2023

2

2025

6

2026

4

Latest 9001 CVEs

The most recently disclosed vulnerabilities affecting 9001.

Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
CWE-79
Medium · CVSS 4.4
EPSS 0.2%2026-03-11
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
CWE-863
Low · CVSS 2.3
EPSS 0.3%2026-03-11
Copyparty volflag `nohtml` did not block javascript in svg files
CWE-79
Medium · CVSS 5.4
EPSS 0.3%2026-03-10
Copyparty vulnerable to eflected cross-site scripting via setck parameter
CWE-79
Medium · CVSS 6.1
EPSS 0.2%2026-02-26
copyparty: Sharing a single file does not fully restrict access to other files in source folder
CWE-862
Medium · CVSS 5.3
EPSS 0.3%2025-09-09
High vulnerability · 2025-08-29
CWE-79
High · CVSS 7.8
EPSS 0.2%2025-08-29
Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
CWE-400
High · CVSS 7.5
EPSS 0.4%2025-08-01
copyparty Reflected XSS via Filter Parameter
CWE-79
Medium · CVSS 6.3
EPSS 2.4%2025-07-31
copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata
CWE-79
Medium · CVSS 6.1
EPSS 0.4%2025-07-28
copyparty renders unsanitized filenames as HTML when user uploads empty files
CWE-83
Medium · CVSS 6.1
EPSS 0.5%2025-02-25
Medium vulnerability · 2023-07-25
CWE-79
Medium · CVSS 4.8
EPSS 9.3%2023-07-25
Path traversal in copyparty
CWE-22
High · CVSS 8.7
EPSS 44.9%2023-07-14

Track new 9001 CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor 9001 CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft25,694 CVEs linux21,037 CVEs Google15,679 CVEs Apple14,792 CVEs Oracle11,815 CVEs Debian10,221 CVEs IBM8,381 CVEs Red Hat7,830 CVEs

Browse all vendors

Frequently asked questions

Common questions about 9001 vulnerabilities.

How many CVEs does 9001 have?: 9001 has 12 published CVE records since 2023, including 10 in the last two years.
How many 9001 CVEs are in CISA KEV?: None of 9001's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which 9001 products have the most CVEs?: The 9001 products with the most published CVEs are copyparty.
What are the most common weakness types in 9001 CVEs?: 9001's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption), CWE-83 (Improper Neutralization of Script in Attributes in a Web Page).
Are there public exploits for 9001 vulnerabilities?: Yes — 7 of 9001's CVEs have a known public exploit.
What is the average severity of 9001 CVEs?: The average CVSS base score across 9001's scored CVEs is 5.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track 9001 vulnerabilities

Monitor new 9001 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing