Month report
March 2020
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,754 CVEs published, +46.9% on the same month last year. 36 rated critical, 0 listed by CISA as exploited. microsoft led with 116; the most common weakness class was CWE-79 (37). opensuse climbed 66 places, the largest move. 10 vendors ranked for the first time.
Published
1,754
+25.6%on the previous month
Critical / high
36 / 136
of the 320 scored
Medium / low
126 / 22
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
83
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
20 published this month and listed since — not the 0 listed during it.
Median days to listing
603
from publication to CISA's date added
Listed within 7 days
0%
of the 20
Listed within 30 days
0%
of the 20
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 116 | 1 | 2 | 3 | windows 10 version 1909 for 32 bit systems (77) · windows 10 version 1909 for arm64 based systems (77) · windows 10 version 1909 for x64 based systems (77) | — | |
| 2 | qualcomm | 47 | 1 | snapdragon auto snapdragon compute snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon mobile snapdragon voice music snapdragon wearables (8) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon mobile snapdragon voice music snapdragon wired infrastructure and networking (4) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wired infrastructure and networking (4) | ↑8 | |||
| 3 | adobe | 42 | 1 | adobe photoshop (22) · adobe acrobat and reader (13) · adobe bridge (2) | ↑2 | |||
| 4 | jenkins project | 38 | jenkins (4) · jenkins mac plugin (3) · jenkins artifactory plugin (2) | ↑3 | ||||
| 5 | redhat | 38 | 2 | 1 | ansible (11) · newlib (8) · jackson databind (2) | ↑12 | ||
| 6 | ibm | 33 | 1 | spectrum protect plus (6) · tivoli netcool impact (6) · tivoli netcool omnibus (4) | ↓4 | |||
| 7 | wago | 29 | wago pfc200 (13) · wago pfc200 firmware (12) · wago e cockpit (4) | · | ||||
| 8 | intel | 27 | 1 | intel r graphics drivers (16) · intel r fpga programmable acceleration card n3000 (2) · intel r nuc firmware (2) | · | |||
| 9 | mozilla | 22 | 1 | 1 | firefox (18) · thunderbird (14) · firefox esr (7) | ↑17 | ||
| 10 | cisco | 18 | cisco sd wan solution (3) · cisco prime collaboration provisioning (2) · cisco vmanage software (2) | ↓4 | ||||
| 11 | siemens | 18 | control center server ccs (6) · sinvr sivms video server (5) · openpcs 7 v8 1 (1) | ↑7 | ||||
| 12 | sap se | 16 | 3 | 1 | 1 | sap enable now (2) · sap business objects business intelligence platform crystal reports (1) · sap businessobjects mobile mobilebiservice (1) | ↓1 | |
| 13 | dell | 14 | 4 | xtremio (3) · data protection advisor (2) · rsa authentication manager (2) | ↑8 | |||
| 14 | fortinet | 11 | 1 | fortinet fortiweb (2) · fortinet fortiadc (1) · fortinet fortiap (1) | ↑11 | |||
| 15 | 11 | chrome (9) · closure library (1) · dart sdk (1) | ↓11 | |||||
| 16 | netapp | 8 | 2 | agile plm (7) · autovue for agile product lifecycle management (7) · banking digital experience (7) | ↑26 | |||
| 17 | tp link | 8 | 1 | 3 | archer a7 (8) | · | ||
| 18 | debian | 7 | 2 | agile plm (7) · autovue for agile product lifecycle management (7) · banking digital experience (7) | ↑44 | |||
| 19 | 7 | facebook thrift (3) · hhvm (3) · osquery (1) | · | |||||
| 20 | fasterxml | 7 | 2 | agile plm (7) · autovue for agile product lifecycle management (7) · banking digital experience (7) | · | |||
| 21 | foxit | 7 | studio photo (7) | ↓12 | ||||
| 22 | mitsubishi electric | 7 | mitsubishi electric melqic iu1 series (6) · melsoft transmission port udp ip of multiple mitsubishi electric melsec series (1) | ↑63 | ||||
| 23 | oracle | 7 | 2 | agile plm (7) · autovue for agile product lifecycle management (7) · banking digital experience (7) | · | |||
| 24 | suse | 7 | suse linux enterprise server 12 (5) · suse linux enterprise server 15 (5) · factory (3) | · | ||||
| 25 | trend micro | 7 | 1 | 3 | trend micro officescan trend micro apex one trend micro worry free business security wfbs (3) · trend micro officescan trend micro apex one (2) · trend micro password manager for windows (1) | ↑9 | ||
| 26 | parallels | 6 | desktop (6) | new | ||||
| 27 | mcafee | 5 | network security management nsm (2) · mcafee advanced threat defense atd (1) · mcafee agent ma (1) | ↑3 | ||||
| 28 | micro focus international | 5 | micro focus service manager automation sma (1) · micro focus vibe (1) · service manager (1) | · | ||||
| 29 | nvidia | 5 | nvidia gpu display driver (5) | ↑64 | ||||
| 30 | opensuse | 5 | factory (3) · suse linux enterprise server 12 (3) · suse linux enterprise server 15 (3) | ↑66 | ||||
| 31 | otrs | 5 | otrs (5) · otrs community edition (5) | · | ||||
| 32 | apache | 4 | 1 | apache commons configuration (1) · apache shardingsphere incubator (1) · apache tika (1) | ↓19 | |||
| 33 | ekakin | 3 | shihonkanri plus goout (3) | new | ||||
| 34 | hcl software | 3 | hcl connections (3) | new | ||||
| 35 | palo alto networks | 3 | pan os (3) | ↓3 | ||||
| 36 | sunnet | 3 | ehrd (3) | new | ||||
| 37 | symfony | 3 | symfony (3) | new | ||||
| 38 | unisoon | 3 | 1 | ultralog express (3) · ultralog express firmware (2) | new | |||
| 39 | vertiv | 3 | avocent umg 4000 (3) | new | ||||
| 40 | vmware | 3 | fusion (2) · workstation (2) · vmware horizon client for windows (1) | ↓5 | ||||
| 41 | atlassian | 2 | application links (1) · jira server and data center (1) · jira software (1) | ↓29 | ||||
| 42 | canonical | 2 | python apt (2) | ↓22 | ||||
| 43 | cutephp com | 2 | cutenews (2) | new | ||||
| 44 | d link | 2 | multiple routers (2) | ↓5 | ||||
| 45 | dojo | 2 | dojo (1) · dojox (1) | new | ||||
| 46 | horde | 2 | 2 | groupware webmail edition (2) | · | |||
| 47 | huawei | 2 | honor v30 (1) · huawei usg6000v (1) | ↓39 | ||||
| 48 | johnson controls | 2 | 1 | kantech entrapass corporate edition (1) · kantech entrapass global edition (1) · metasys application and data server ads ads lite (1) | · | |||
| 49 | keitai site net | 2 | mailform (2) | new | ||||
| 50 | kubernetes | 2 | kubernetes (2) | ↑26 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2020-03 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79371 critical—
- 2CWE-502142 critical↑24
- 3CWE-125110 critical↑3
- 4CWE-20112 critical—
- 5CWE-47690 critical↑58
- 6CWE-9491 critical↑8
- 7CWE-2280 critical↑2
- 8CWE-7881 critical↓6
- 9CWE-78785 critical↓6
- 10CWE-20070 critical↑9
- 1CWE-28570 critical↑6
- 2CWE-73270 critical↑61
- 3CWE-8972 critical↑20
- 4CWE-12161 critical↑4
- 5CWE-40060 critical↓8
- 6CWE-26650 critical↑5
- 7CWE-32151 critical↑33
- 8CWE-7751 critical↑57
- 9CWE-2340 critical↑21
- 10CWE-32741 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.