- How many CVEs does ConnectWise have?
- ConnectWise has 40 published CVE records since 2017, including 14 in the last two years.
- How many ConnectWise CVEs are in CISA KEV?
- Yes — 5 of ConnectWise's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which ConnectWise products have the most CVEs?
- The ConnectWise products with the most published CVEs are ScreenConnect, Automate, control, professional service automation, PSA.
- What are the most common weakness types in ConnectWise CVEs?
- ConnectWise's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-494 (Download of Code Without Integrity Check), CWE-319 (Cleartext Transmission of Sensitive Information), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
- Are there public exploits for ConnectWise vulnerabilities?
- Yes — 15 of ConnectWise's CVEs have a known public exploit.
- How many critical ConnectWise vulnerabilities are there?
- ConnectWise has 10 critical and 15 high-severity CVEs.
- What is the average severity of ConnectWise CVEs?
- The average CVSS base score across ConnectWise's scored CVEs is 7.7.