- How many CVEs does ISC have?
- ISC has 282 published CVE records since 1999, including 49 in the last two years.
- How many ISC CVEs are in CISA KEV?
- Yes — 1 of ISC's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which ISC products have the most CVEs?
- The ISC products with the most published CVEs are BIND, BIND 9, dhcp, BIND9, inn.
- What are the most common weakness types in ISC CVEs?
- ISC's CVEs most often map to these CWE weakness types: CWE-617 (Reachable Assertion), CWE-20 (Improper Input Validation), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
- Are there public exploits for ISC vulnerabilities?
- Yes — 34 of ISC's CVEs have a known public exploit.
- How many critical ISC vulnerabilities are there?
- ISC has 19 critical and 145 high-severity CVEs.
- What is the average severity of ISC CVEs?
- The average CVSS base score across ISC's scored CVEs is 6.8.