- How many CVEs does wazuh have?
- wazuh has 52 published CVE records since 2018, including 42 in the last two years.
- How many wazuh CVEs are in CISA KEV?
- Yes — 1 of wazuh's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which wazuh products have the most CVEs?
- The wazuh products with the most published CVEs are wazuh, wazuh-manager, github.com/wazuh/wazuh, wazuh-analysisd, wazuh-dashboard.
- What are the most common weakness types in wazuh CVEs?
- wazuh's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-121 (Stack-based Buffer Overflow), CWE-252 (Unchecked Return Value), CWE-276 (Incorrect Default Permissions).
- Are there public exploits for wazuh vulnerabilities?
- Yes — 38 of wazuh's CVEs have a known public exploit.
- How many critical wazuh vulnerabilities are there?
- wazuh has 9 critical and 19 high-severity CVEs.
- What is the average severity of wazuh CVEs?
- The average CVSS base score across wazuh's scored CVEs is 7.3.