- How many CVEs does Avid have?
- Avid has 5 published CVE records since 2011, including 4 in the last two years.
- How many Avid CVEs are in CISA KEV?
- None of Avid's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Avid products have the most CVEs?
- The Avid products with the most published CVEs are Avid NEXIS E-series, Avid NEXIS F-series, Avid NEXIS PRO+, System Director Appliance (SDA+), media composer.
- What are the most common weakness types in Avid CVEs?
- Avid's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-1395 (Dependency on Vulnerable Third-Party Component), CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
- Are there public exploits for Avid vulnerabilities?
- Yes — 5 of Avid's CVEs have a known public exploit.
- How many critical Avid vulnerabilities are there?
- Avid has 1 critical and 4 high-severity CVEs.
- What is the average severity of Avid CVEs?
- The average CVSS base score across Avid's scored CVEs is 8.6.
