- How many CVEs does ConnectWise have?
- ConnectWise has 39 published CVE records since 2017, including 13 in the last two years.
- How many ConnectWise CVEs are in CISA KEV?
- Yes — 4 of ConnectWise's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which ConnectWise products have the most CVEs?
- The ConnectWise products with the most published CVEs are Automate, ScreenConnect, control, professional service automation, PSA.
- What are the most common weakness types in ConnectWise CVEs?
- ConnectWise's CVEs most often map to these CWE weakness types: CWE-494 (Download of Code Without Integrity Check), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-319 (Cleartext Transmission of Sensitive Information), CWE-287 (Improper Authentication).
- Are there public exploits for ConnectWise vulnerabilities?
- Yes — 11 of ConnectWise's CVEs have a known public exploit.
- How many critical ConnectWise vulnerabilities are there?
- ConnectWise has 9 critical and 15 high-severity CVEs.
- What is the average severity of ConnectWise CVEs?
- The average CVSS base score across ConnectWise's scored CVEs is 7.6.