- How many CVEs does Cesanta have?
- Cesanta has 156 published CVE records since 2017, including 29 in the last two years.
- How many Cesanta CVEs are in CISA KEV?
- None of Cesanta's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Cesanta products have the most CVEs?
- The Cesanta products with the most published CVEs are mJS, mongoose, Mongoose Web Server, mongoose embedded web server library, Frozen.
- What are the most common weakness types in Cesanta CVEs?
- Cesanta's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference), CWE-674 (Uncontrolled Recursion), CWE-125 (Out-of-bounds Read).
- Are there public exploits for Cesanta vulnerabilities?
- Yes — 131 of Cesanta's CVEs have a known public exploit.
- How many critical Cesanta vulnerabilities are there?
- Cesanta has 27 critical and 41 high-severity CVEs.
- What is the average severity of Cesanta CVEs?
- The average CVSS base score across Cesanta's scored CVEs is 6.8.