CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

CVSS Score Distribution For Top 50 Vendors By Total Number Of "Distinct" Vulnerabilities

Vendor Name Number of Total Vulnerabilities # Of Vulnerabilities Weighted Average % Of Total
0-1 1-2 2-3 3-4 4-5 5-6 6-7 7-8 8-9 9+ 0-1 1-2 2-3 3-4 4-5 5-6 6-7 7-8 8-9 9+
1 Microsoft 8661 2 110 629 244 1693 946 918 1895 37 2187 7.00 0 1 7 3 20 11 11 22 0 25
2 Oracle 8548 2 145 423 557 2613 2459 991 734 39 585 5.90 0 2 5 7 31 29 12 9 0 7
3 Google 7171 52 683 94 1958 673 1242 1315 37 1117 6.60 0 1 10 1 27 9 17 18 1 16
4 Debian 6543 79 364 167 1825 1344 1355 1117 19 273 6.20 0 1 6 3 28 21 21 17 0 4
5 Apple 5581 1 57 391 51 1099 694 1509 774 17 988 6.80 0 1 7 1 20 12 27 14 0 18
6 IBM 5446 2 64 364 985 1482 1041 549 535 26 398 5.70 0 1 7 18 27 19 10 10 0 7
7 Redhat 4271 66 337 186 1126 770 694 723 16 353 6.20 0 2 8 4 26 18 16 17 0 8
8 Cisco 4231 2 6 94 188 941 907 564 988 45 496 6.70 0 0 2 4 22 21 13 23 1 12
9 Canonical 3335 48 221 108 998 591 511 597 9 252 6.20 0 1 7 3 30 18 15 18 0 8
10 Fedoraproject 3330 34 178 90 974 747 790 420 10 87 6.10 0 1 5 3 29 22 24 13 0 3
11 Linux 2862 1 105 468 79 916 164 231 759 9 130 5.80 0 4 16 3 32 6 8 27 0 5
12 Opensuse 2707 42 173 93 685 535 504 368 5 302 6.30 0 2 6 3 25 20 19 14 0 11
13 Mozilla 2352 12 77 8 541 442 322 400 1 549 7.10 0 1 3 0 23 19 14 17 0 23
14 HP 1803 1 10 64 44 293 256 131 400 20 584 7.50 0 1 4 2 16 14 7 22 1 32
15 Apache 1697 11 43 45 433 570 200 298 5 92 6.30 0 1 3 3 26 34 12 18 0 5
16 SUN 1535 3 26 98 44 290 271 108 404 3 288 6.80 0 2 6 3 19 18 7 26 0 19
17 Netapp 1411 20 97 50 539 320 203 157 4 21 5.70 0 1 7 4 38 23 14 11 0 1
18 Adobe 1408 19 16 239 147 96 96 4 791 8.20 0 0 1 1 17 10 7 7 0 56
19 Jenkins 1101 1 58 169 506 143 186 26 1 11 5.30 0 0 5 15 46 13 17 2 0 1
20 SAP 1098 3 30 72 352 283 174 121 3 60 6.10 0 0 3 7 32 26 16 11 0 5
21 GNU 929 1 12 53 33 254 208 171 158 2 37 6.10 0 1 6 4 27 22 18 17 0 4
22 Suse 914 18 77 13 173 114 122 170 227 6.90 0 2 8 1 19 12 13 19 0 25
23 Siemens 752 5 34 30 152 188 205 102 8 28 6.30 0 1 5 4 20 25 27 14 1 4
24 Gitlab 690 1 11 69 301 212 61 34 1 5.50 0 0 2 10 44 31 9 5 0 0
25 F5 682 1 27 32 197 223 78 93 4 27 6.10 0 0 4 5 29 33 11 14 1 4
26 PHP 662 1 20 8 69 205 97 218 2 42 6.80 0 0 3 1 10 31 15 33 0 6
27 Novell 620 1 7 24 8 145 139 47 113 136 6.90 0 1 4 1 23 22 8 18 0 22
28 Imagemagick 619 2 2 341 51 120 96 7 6.00 0 0 0 0 55 8 19 16 0 1
29 Wireshark 618 23 33 184 300 8 48 3 19 5.80 0 0 4 5 30 49 1 8 0 3
30 Huawei 590 3 45 17 82 207 71 126 8 31 6.40 0 1 8 3 14 35 12 21 1 5
31 Vmware 571 6 41 30 129 102 95 111 4 53 6.40 0 1 7 5 23 18 17 19 1 9
32 Intel 552 8 141 17 252 47 15 65 1 6 5.00 0 1 26 3 46 9 3 12 0 1
33 Symantec 538 4 37 28 117 92 59 108 9 84 6.60 0 1 7 5 22 17 11 20 2 16
34 Mcafee 515 7 44 50 178 73 66 71 4 22 5.70 0 1 9 10 35 14 13 14 1 4
35 Freebsd 475 7 60 11 79 89 37 154 3 35 6.40 0 1 13 2 17 19 8 32 1 7
36 Moodle 447 7 34 202 109 63 24 8 5.70 0 0 2 8 45 24 14 5 0 2
37 Juniper 445 3 34 34 82 110 43 104 6 29 6.30 0 1 8 8 18 25 10 23 1 7
38 Joomla 439 2 7 98 92 63 169 8 6.70 0 0 0 2 22 21 14 38 0 2
39 Cpanel 421 6 49 56 139 64 53 24 4 26 5.50 0 1 12 13 33 15 13 6 1 6
40 Dell 415 2 37 28 86 102 38 68 4 50 6.30 0 0 9 7 21 25 9 16 1 12
41 XEN 397 22 50 7 160 33 59 52 4 10 5.50 0 6 13 2 40 8 15 13 1 3
42 EMC 395 1 20 29 89 54 49 69 13 71 6.80 0 0 5 7 23 14 12 17 3 18
43 Fortinet 395 11 34 158 61 50 50 1 30 6.00 0 0 3 9 40 15 13 13 0 8
44 Atlassian 386 2 55 155 89 39 24 22 5.80 0 0 1 14 40 23 10 6 0 6
45 Wordpress 382 8 29 140 86 51 55 1 12 6.00 0 0 2 8 37 23 13 14 0 3
46 Ffmpeg 378 1 2 95 23 110 74 73 7.20 0 0 1 0 25 6 29 20 0 19
47 Zohocorp 373 16 104 62 55 110 1 25 6.60 0 0 0 4 28 17 15 29 0 7
48 Qemu 369 17 149 10 85 27 19 52 1 9 4.80 0 5 40 3 23 7 5 14 0 2
49 Broadcom 355 1 13 5 65 79 42 84 2 64 7.00 0 0 4 1 18 22 12 24 1 18
50 Drupal 348 13 50 108 77 45 45 3 7 5.80 0 0 4 14 31 22 13 13 1 2

Vendor(s) with highest weighted average (8.20): Adobe  

Weighted average = SUM((Cvss Range (e.g: 2 for range 1-2 )) * (Number of vulnerabilities in that range)) / (Total number of vulnerabilities)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.