Month report
February 2017
Rolled up 2026-08-09 20:45 from 370,700 CVE records
1,041 CVEs published, +173.9% on the same month last year. 6 rated critical, 0 listed by CISA as exploited. ibm led with 189; the most common weakness class was CWE-119 (2). intel climbed 12 places, the largest move. 5 vendors ranked for the first time.
Published
1,041
Critical / high
6 / 17
Medium / low
2 / 0
Added to CISA KEV
0
Public exploit
95
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1847.5
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | ibm | 189 | 3 | kenexa lms on cloud (20) · access manager (16) · key lifecycle manager (11) | · | |||
| 2 | 54 | 2 | android (54) | — | ||||
| 3 | nvidia | 16 | 2 | windows gpu display driver (10) · gpu display driver (5) · linux gpu display driver (1) | · | |||
| 4 | iceni | 6 | argus (6) | new | ||||
| 5 | fortinet | 4 | fortimanager (1) · fortinet connect (1) · fortinet fortigate (1) | new | ||||
| 6 | aerospike | 3 | 2 | database server (3) | ↑7 | |||
| 7 | intel | 3 | epo (1) · intel ethernet controller x710 family and intel ethernet controller xl710 family (1) · mcafee agent (1) | ↑12 | ||||
| 8 | justsystems | 3 | ichitaro (3) | new | ||||
| 9 | nitro | 3 | nitro pro (3) | new | ||||
| 10 | f5 networks | 2 | 1 | f5 big ip ltm aam afm analytics apm asm gtm link controller pem psm (1) · f5 big ip rest framework logging (1) | ↓1 | |||
| 11 | microsoft | 2 | 1 | 2 | internet browser (1) · windows graphics component (1) | · | ||
| 12 | oracle | 1 | mysql server (1) | ↓11 | ||||
| 13 | puppet | 1 | puppet enterprise (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-02 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 13 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-11920 critical—
- 2CWE-2020 critical·
- 3CWE-26420 criticalnew
- 4CWE-30722 critical·
- 5CWE-35220 critical·
- 6CWE-39920 critical·
- 7CWE-12010 critical↓5
- 8CWE-20010 critical·
- 9CWE-28710 critical·
- 10CWE-30611 critical·
- 1CWE-40010 critical·
- 2CWE-59210 critical·
- 3CWE-7811 critical·
- 4CWE-7910 critical·
- 5CWE-84310 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.