---
title: "sco vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/sco
type: vendor
description: "sco has 129 published CVEs, 0 in CISA KEV and 51 with public exploits."
updated: 2011-03-16
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# sco vulnerabilities

- **Published CVEs:** 129
- **In CISA KEV:** 0
- **With a public exploit:** 51
- **With a patch:** 11
- **Average CVSS:** 6.1
- **CVEs in the last two years:** 0
- **First CVE:** 1999-09-29
- **Latest CVE:** 2011-03-16

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 14 |
| High | 52 |
| Medium | 47 |
| Low | 16 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [openserver](https://radicalnotion.ai/vendor/sco/openserver) | 72 |
| [unixware](https://radicalnotion.ai/vendor/sco/unixware) | 66 |
| [open desktop](https://radicalnotion.ai/vendor/sco/open-desktop) | 19 |
| [unix](https://radicalnotion.ai/vendor/sco/unix) | 10 |
| [internet faststart](https://radicalnotion.ai/vendor/sco/internet-faststart) | 9 |
| [openserver enterprise system](https://radicalnotion.ai/vendor/sco/openserver-enterprise-system) | 5 |
| [open desktop lite](https://radicalnotion.ai/vendor/sco/open-desktop-lite) | 5 |
| [open unix](https://radicalnotion.ai/vendor/sco/open-unix) | 5 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 |
| [CWE-399](https://radicalnotion.ai/cwe/cwe-399) | Resource Management Errors | 2 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 2 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 2 |
| [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 1 |
| [CWE-1067](https://radicalnotion.ai/cwe/cwe-1067) | Excessive Execution of Sequential Searches of Data Resource | 1 |
| [CWE-502](https://radicalnotion.ai/cwe/cwe-502) | Deserialization of Untrusted Data | 1 |
| [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 1 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [mitre](https://radicalnotion.ai/cna/mitre) | 126 |
| [redhat](https://radicalnotion.ai/cna/redhat) | 3 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2004 | 9 |
| 2005 | 20 |
| 2006 | 6 |
| 2007 | 0 |
| 2008 | 2 |
| 2009 | 3 |
| 2010 | 0 |
| 2011 | 1 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2011-1432 | - | medium | 6.8 | 2.3% | No | 2011-03-16 |
| CVE-2009-1552 | - | high | 7.8 | 1.4% | No | 2009-05-06 |
| CVE-2008-6559 | - | high | 7.2 | 0.8% | No | 2009-03-30 |
| CVE-2008-6558 | - | high | 7.2 | 0.9% | No | 2009-03-30 |
| CVE-2008-0310 | - | medium | 6.9 | 1.0% | No | 2008-04-07 |
| CVE-2008-1343 | - | medium | 4.9 | 0.8% | No | 2008-03-17 |
| CVE-2006-4655 | - | medium | 4.6 | 0.9% | No | 2006-09-09 |
| CVE-2005-2934 | - | high | 7.2 | 0.8% | No | 2006-02-24 |
| CVE-2005-3625 | - | critical | 10.0 | 3.8% | No | 2006-01-06 |
| CVE-2005-3624 | - | medium | 5.0 | 2.3% | No | 2006-01-06 |
| CVE-2005-3626 | - | medium | 5.0 | 3.4% | No | 2006-01-06 |
| CVE-2006-0072 | - | high | 7.5 | 4.9% | No | 2006-01-04 |

## Frequently asked questions

### How many CVEs does sco have?

sco has 129 published CVE records since 1999, including 0 in the last two years.

### How many sco CVEs are in CISA KEV?

None of sco's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which sco products have the most CVEs?

The sco products with the most published CVEs are openserver, unixware, open desktop, unix, internet faststart.

### What are the most common weakness types in sco CVEs?

sco's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-399 (Resource Management Errors), CWE-20 (Improper Input Validation), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

### Are there public exploits for sco vulnerabilities?

Yes — 51 of sco's CVEs have a known public exploit.

### How many critical sco vulnerabilities are there?

sco has 14 critical and 52 high-severity CVEs.

### What is the average severity of sco CVEs?

The average CVSS base score across sco's scored CVEs is 6.1.

## Related vendors

- [Grokability](https://radicalnotion.ai/vendor/grokability) (131 CVEs)
- [PowerDNS](https://radicalnotion.ai/vendor/powerdns) (131 CVEs)
- [Roundcube](https://radicalnotion.ai/vendor/roundcube) (130 CVEs)
- [GE](https://radicalnotion.ai/vendor/ge) (129 CVEs)
- [GStreamer](https://radicalnotion.ai/vendor/gstreamer) (129 CVEs)
- [Insyde](https://radicalnotion.ai/vendor/insyde) (129 CVEs)
- [LibreNMS](https://radicalnotion.ai/vendor/librenms) (128 CVEs)
- [RSA](https://radicalnotion.ai/vendor/rsa) (128 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/sco). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.