Month report
July 2022
Rolled up 2026-08-09 20:45 from 381,139 CVE records
1,977 CVEs published, +25% on the same month last year. 63 rated critical, 3 listed by CISA as exploited. google led with 125; the most common weakness class was CWE-79 (112). oracle climbed 67 places, the largest move. 10 vendors ranked for the first time.
Published
1,977
Critical / high
63 / 316
Medium / low
462 / 63
Added to CISA KEV
3
Public exploit
84
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
18.5
Listed within 7 days
37.5%
Listed within 30 days
62.5%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-89 | CWE-120 | CWE-125 | CWE-416 | CWE-352 | CWE-787 | CWE-200 |
|---|---|---|---|---|---|---|---|---|
| 1 | ||||||||
| oracle | 1 | |||||||
| microsoft | 2 | |||||||
| ibm | ||||||||
| cisco | 2 | 35 | ||||||
| jenkins project | ||||||||
| siemens | 2 | 11 | 8 | |||||
| samsung mobile | 7 |
Detection gap
Listed as exploited, no public template
Listed this month
3
With a template
1
No template
2
- 1microsoft2of 2 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | 125 | 3 | 2 | chrome (124) · google play services sdk (1) | · | |||
| 2 | oracle | 83 | 1 | mysql server (22) · banking trade finance (6) · flexcube universal banking (6) | ↑67 | |||
| 3 | microsoft | 82 | 1 | 4 | windows server 2022 (44) · windows server version 20h2 (44) · windows server 2019 (43) | — | ||
| 4 | ibm | 65 | 1 | engineering lifecycle optimization publishing (6) · robotic process automation (6) · security verify information queue (6) | ↑2 | |||
| 5 | cisco | 55 | 5 | cisco small business rv series router firmware (35) · cisco nexus dashboard (9) · cisco unified communications manager (5) | ↑10 | |||
| 6 | jenkins project | 42 | 1 | jenkins openshift deployer plugin (4) · jenkins coverity plugin (3) · jenkins deployer framework plugin (3) | ↓5 | |||
| 7 | siemens | 42 | 2 | 1 | pads standard plus viewer (20) · scalance x200 4p irt (3) · scalance x201 3p irt (3) | — | ||
| 8 | samsung mobile | 38 | samsung mobile devices (29) · galaxy store (3) · calendar (1) | ↓3 | ||||
| 9 | adobe | 34 | acrobat reader (21) · incopy (4) · indesign (4) | ↓5 | ||||
| 10 | mediatek | 27 | mt6761 mt6779 mt6781 mt6833 mt6853 mt6873 mt6877 mt6879 mt6883 mt6885 mt6889 mt6893 mt6895 mt6983 mt8167s mt8168 mt8175 mt8183 mt8185 mt8362a mt8365 mt8385 mt8667 mt8675 mt8696 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (6) · mt6580 mt6735 mt6737 mt6739 mt6753 mt6761 mt6765 mt6768 mt6771 mt6779 mt6781 mt6785 mt6833 mt6853 mt6873 mt6877 mt6879 mt6883 mt6885 mt6889 mt6893 mt6895 mt6983 mt8321 mt8666 mt8667 mt8675 mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (3) · mt2731 mt2735 mt6297 mt6725 mt6735 mt6737 mt6739 mt6750 mt6750s mt6755 mt6757 mt6757p mt6758 mt6761 mt6762 mt6762d mt6762m mt6763 mt6765 mt6765t mt6767 mt6768 mt6769 mt6769t mt6769z mt6771 mt6775 mt6779 mt6781 mt6783 mt6785 mt6785t mt6789 mt6797 mt6799 mt6833 mt6853 mt6855 mt6873 mt6875 mt6877 mt6879 mt6880 mt6883 mt6885 mt6889 mt6890 mt6891 mt6893 mt6895 mt6983 mt8666 mt8667 mt8675 mt8735a mt8735b mt8765 mt8766 mt8768 mt8771 mt8781 mt8786 mt8788 mt8789 mt8791 mt8797 (2) | ↑1 | ||||
| 11 | sap se | 20 | sap netweaver enterprise portal (4) · sap business one (3) · sap s 4hana (2) | ↓2 | ||||
| 12 | cybozu | 19 | cybozu garoon (19) | · | ||||
| 13 | foxit | 18 | 1 | pdf reader (18) | · | |||
| 14 | gitlab | 18 | 1 | 1 | gitlab (18) | ↑7 | ||
| 15 | dell | 17 | 1 | 1 | dell bsafe crypto c micro edition (8) · powerstore (4) · dell bsafe micro edition suite (2) | ↓7 | ||
| 16 | sourcecodester | 17 | 1 | garage management system (5) · simple e learning system (3) · clinics patient management system (2) | — | |||
| 17 | fortinet | 15 | fortinet forticlientwindows (2) · fortinet fortimanager fortianalyzer (2) · fortinet fortiadc (1) | · | ||||
| 18 | juniper networks | 15 | junos os (14) · junos os evolved (4) | · | ||||
| 19 | itech | 14 | movie portal script (5) · auction script (1) · b2b script (1) | new | ||||
| 20 | apache | 13 | 1 | 1 | 3 | apache druid (2) · apache calcite avatica (1) · apache cloudstack (1) | ↓10 | |
| 21 | huawei | 13 | emui (13) · harmonyos (11) · magic ui (11) | ↓9 | ||||
| 22 | schneider electric | 12 | 1 | opc ua modicon communication module (7) · x80 advanced rtu communication module (7) · easergy p5 (3) | ↑2 | |||
| 23 | synology | 12 | 1 | audio station (2) · diskstation manager dsm (2) · media server (2) | · | |||
| 24 | vim | 12 | vim vim (12) | ↓11 | ||||
| 25 | parallels | 10 | desktop (6) · access (4) | · | ||||
| 26 | nodejs | 8 | 1 | node (6) · undici (2) | · | |||
| 27 | nvidia | 8 | 2 | nvidia dgx a100 (6) · nvidia flare (2) | · | |||
| 28 | western digital | 8 | sweet b library (4) · my cloud (2) · my cloud home (2) | · | ||||
| 29 | advantech iview | 7 | 1 | 1 | iview (7) | new | ||
| 30 | linux | 7 | linux (6) · xen (4) · linux kernel (1) | · | ||||
| 31 | mitsubishi electric | 7 | 1 | genesis64 (7) · iconics suite (7) · mc works64 (6) | · | |||
| 32 | mitsubishi electric iconics digital solutions | 7 | 1 | genesis64 (7) · iconics suite (7) · mc works64 (6) | new | |||
| 33 | chcnav | 6 | chcnav p5e gnss (6) | new | ||||
| 34 | inductive automation | 6 | ignition (6) | new | ||||
| 35 | kubeedge | 6 | kubeedge (6) | ↑57 | ||||
| 36 | microweber | 6 | microweber microweber (6) | ↑30 | ||||
| 37 | ovarro | 6 | tbox (6) | new | ||||
| 38 | the eclipse foundation | 6 | 1 | eclipse jetty (3) · eclipse californium (1) · eclipse equinox p2 (1) | · | |||
| 39 | atlassian | 5 | 2 | 1 | 1 | confluence data center (3) · confluence server (3) · jira service management data center (3) | ↑39 | |
| 40 | hcl software | 5 | hcl bigfix (2) · hcl launch (2) · hcl commerce (1) | · | ||||
| 41 | jetbrains | 5 | intellij idea (2) · teamcity (2) · hub (1) | · | ||||
| 42 | micodus | 5 | 2 | mv720 (5) | new | |||
| 43 | xen | 5 | xen (5) · linux (4) | ↑32 | ||||
| 44 | amd | 4 | amd processors (2) · athlon series (2) · ryzen series (2) | · | ||||
| 45 | hap wi | 4 | 4 | 4 | roxy wi (4) | new | ||
| 46 | hinet | 4 | hicos client side citizen digital certificate (4) | · | ||||
| 47 | mattermost | 4 | mattermost (4) | · | ||||
| 48 | rapid7 | 4 | velociraptor (4) | · | ||||
| 49 | vicidial | 4 | 3 | vicidial (4) | new | |||
| 50 | artica pfms | 3 | pandora fms (3) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2022-07 that are on the CISA KEV catalog today. The 3 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791121 critical—
- 2CWE-89444 critical↑1
- 3CWE-120422 critical↑20
- 4CWE-125331 critical↑9
- 5CWE-416320 critical↑10
- 6CWE-352300 critical↓4
- 7CWE-787291 critical↑1
- 8CWE-200220 critical↓4
- 9CWE-20210 critical↓2
- 10CWE-122181 critical↑6
- 1CWE-284170 critical↑1
- 2CWE-502166 critical↑48
- 3CWE-22140 critical↓2
- 4CWE-287142 critical↑3
- 5CWE-400140 critical↓1
- 6CWE-78133 critical↓6
- 7CWE-306114 critical↑8
- 8CWE-434111 critical↑3
- 9CWE-28581 critical—
- 10CWE-11970 critical↓11
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.