Month report
October 2017
Rolled up 2026-08-09 20:45 from 370,700 CVE records
1,398 CVEs published, +103.5% on the same month last year. 5 rated critical, 0 listed by CISA as exploited. oracle led with 179; the most common weakness class was CWE-119 (10). f5 networks climbed 29 places, the largest move. 14 vendors ranked for the first time.
Published
1,398
Critical / high
5 / 31
Medium / low
15 / 0
Added to CISA KEV
0
Public exploit
173
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1598
Listed within 7 days
0%
Listed within 30 days
0%
Weakness × vendor
Where the two overlap
| Vendor | CWE-119 | CWE-79 | CWE-323 | CWE-20 | CWE-200 | CWE-416 | CWE-121 | CWE-287 |
|---|---|---|---|---|---|---|---|---|
| oracle | ||||||||
| microsoft | 2 | |||||||
| ibm | ||||||||
| juniper networks | ||||||||
| apache | ||||||||
| f5 networks | ||||||||
| foxit | 5 |
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 179 | 1 | 6 | java (20) · mysql server (18) · peoplesoft enterprise pt peopletools (14) | · | ||
| 2 | microsoft | 61 | 2 | 10 | chakracore microsoft edge (12) · internet explorer (5) · windows kernel (5) | ↓1 | ||
| 3 | ibm | 28 | rational engineering lifecycle manager (7) · daeja viewone (4) · rational collaborative lifecycle management (3) | — | ||||
| 4 | juniper networks | 25 | 3 | 1 | junos os (18) · junos space (4) · contrail (2) | · | ||
| 5 | 22 | 2 | android (22) | ↓3 | ||||
| 6 | apache | 18 | 1 | 3 | apache nifi (4) · apache portable runtime (2) · apache wicket (2) | ↓2 | ||
| 7 | f5 networks | 11 | big ip ltm aam afm analytics apm asm dns gtm link controller pem websafe (2) · big ip aam pem (1) · big ip ltm aam afm analytics apm asm dns edge gateway gtm link controller pem webaccelerator (1) | ↑29 | ||||
| 8 | foxit | 9 | foxit reader (9) | new | ||||
| 9 | wi fi alliance | 9 | wi fi protected access wpa and wpa2 (9) | new | ||||
| 10 | trend micro | 7 | 6 | trend micro officescan (7) | ↑1 | |||
| 11 | redhat | 6 | 1 | 2 | 2 | keycloak (3) · centos (1) · enterprise linux (1) | ↓1 | |
| 12 | gemalto | 5 | gemalto s hasp srm sentinel hasp and sentinel ldk products prior to sentinel ldk rte (5) | new | ||||
| 13 | lenovo group | 5 | service framework application (4) · e95 thinkcentre m710s m710t (1) | ↑12 | ||||
| 14 | talos | 5 | computerinsel photoline (3) · simple direct media (2) | new | ||||
| 15 | intel | 4 | 1 | nuc kits (4) | ↑27 | |||
| 16 | micro focus | 4 | hp arcsight esm (3) · hp arcsight esm express (3) · hpe operations orchestration (1) | ↑1 | ||||
| 17 | atlassian | 3 | atlassian fisheye and crucible (2) · bamboo (1) | · | ||||
| 18 | hitachi solutions | 3 | hibun confidential file decryption program (2) · installer of hibun confidential file viewer (1) | new | ||||
| 19 | mcafee | 3 | network data loss prevention (3) | ↑8 | ||||
| 20 | blackberry | 2 | workspaces server (2) | · | ||||
| 21 | brocade communications systems | 2 | zone director controller and unleashed ap firmware (1) · zone director controller firmware (1) | · | ||||
| 22 | fortinet | 2 | fortinet fortios (2) | ↓13 | ||||
| 23 | gnu | 2 | 1 | wget (2) | new | |||
| 24 | n a | 2 | idm 4 5 bidirectional edir driver version (2) | new | ||||
| 25 | nvidia | 2 | geforce experience (1) · jetson (1) | ↓19 | ||||
| 26 | symantec | 2 | symantec encryption desktop (1) · symantec endpoint encryption (1) | ↓8 | ||||
| 27 | akeo consulting | 1 | rufus (1) | new | ||||
| 28 | bitdefender | 1 | bitdefender internet security (1) | new | ||||
| 29 | centos | 1 | 1 | 1 | centos (1) · enterprise linux (1) · linux kernel (1) | new | ||
| 30 | cybozu | 1 | cybozu office (1) | · | ||||
| 31 | dell emc | 1 | data protection advisor (1) · dell emc data protection advisor (1) | · | ||||
| 32 | emc | 1 | data protection advisor (1) · dell emc data protection advisor (1) | new | ||||
| 33 | hackerone | 1 | rubygems (1) | ↑7 | ||||
| 34 | joyent | 1 | joyent smart data center (1) | · | ||||
| 35 | koji project | 1 | koji (1) | new | ||||
| 36 | linux | 1 | 1 | 1 | centos (1) · enterprise linux (1) · linux kernel (1) | new | ||
| 37 | qnap | 1 | 1 | qnap helpdesk app (1) | ↑18 | |||
| 38 | reallyl io | 1 | jwt scala (1) | new | ||||
| 39 | siemens | 1 | cadra (1) | · | ||||
| 40 | synology | 1 | synology audio station (1) | ↓21 | ||||
| 41 | tibco software | 1 | tibco managed file transfer command center (1) · tibco managed file transfer internet server (1) | · | ||||
| 42 | zte | 1 | zxdt22 sf01 (1) | ↓21 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2017-10 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 42 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-119101 critical↑9
- 2CWE-7990 critical↑2
- 3CWE-32380 critical·
- 4CWE-2060 critical↓2
- 5CWE-20050 critical↑2
- 6CWE-41650 critical·
- 7CWE-12140 critical·
- 8CWE-28740 critical↓3
- 9CWE-39940 critical↓6
- 10CWE-12530 critical↓9
- 1CWE-26430 critical↓5
- 2CWE-42830 critical·
- 3CWE-19020 critical↑2
- 4CWE-2220 critical↑2
- 5CWE-30620 critical↑5
- 6CWE-35220 critical↑9
- 7CWE-50221 critical↑13
- 8CWE-61320 critical·
- 9CWE-7820 critical↓11
- 10CWE-84320 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.