CVE security advisories and vulnerability history for OpenSSL.
OpenSSL has 333 published CVE records since 2000, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 54 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.
A quick read on OpenSSL's vulnerability posture, as a share of its 333 published CVEs.
across 333 scored CVEs
132 of 333 scored
1 of 333 CVEs
54 of 333 CVEs
314 of 333 CVEs
How the CVSS severity of OpenSSL's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of OpenSSL's CVEs is confirmed exploited in the wild.
Public exploits
54
54 of OpenSSL's CVEs have a known public exploit available.
The OpenSSL products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in OpenSSL CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish OpenSSL CVE records.
How many OpenSSL CVEs were published each year.
The most recently disclosed vulnerabilities affecting OpenSSL.
CVE counts for other vendors.
Common questions about OpenSSL vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new OpenSSL CVE, with AI-written analysis and remediation steps.
Get an alert for each new OpenSSL CVE, with AI-written analysis and remediation steps.
Monitor OpenSSL CVEs