АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0

Name: АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0
Brand: АО «НТЦ ИТ РОСА»

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

75critical366high426medium19low

updated 2026-10-27

vulnerabilities (1,078)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40438US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-09-16	≤ 3.0
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	≤ 3.0
CVE-2023-4863US	high8.8OT critical	100.0% (100th)	KEV	no fix	2023-09-12	≤ 3.0
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	no fix	2021-01-26	≤ 3.0
CVE-2024-38475US	critical9.1OT critical	100.0% (100th)	KEV	no fix	2024-07-01	≤ 3.0
CVE-2022-0847US	high7.8OT critical	92.8% (100th)	KEV	no fix	2022-03-10	≤ 3.0
CVE-2019-0211US	high7.8OT critical	65.0% (99th)	KEV	no fix	2019-04-08	≤ 3.0
CVE-2025-32463US	high7.8OT critical	55.5% (99th)	KEV	no fix	2025-06-30	≤ 3.0
CVE-2024-1086US	high7.8OT critical	28.1% (98th)	KEV	no fix	2024-01-31	≤ 3.0
CVE-2025-27363US	high8.1OT critical	27.8% (98th)	KEV	no fix	2025-03-11	≤ 3.0
CVE-2023-0386US	high7.8OT critical	7.88% (95th)	KEV	no fix	2023-03-22	≤ 3.0
CVE-2024-53104US	high7.8OT critical	3.40% (89th)	KEV	no fix	2024-12-02	≤ 3.0
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	no fix	2024-06-10	≤ 3.0
CVE-2023-5217US	high8.8OT critical	49.0% (99th)	KEV	no fix	2023-09-28	≤ 3.0
CVE-2024-53197US	—OT critical	4.12% (91st)	KEV	no fix	2024-12-27	≤ 3.0
CVE-2024-53150US	high7.1OT critical	1.35% (71st)	KEV	no fix	2024-12-24	≤ 3.0
CVE-2024-50302US	medium5.5OT critical	0.81% (57th)	KEV	no fix	2024-11-19	≤ 3.0
CVE-2023-50387US	high7.5	100.0% (100th)	Exploit	no fix	2024-02-14	≤ 3.0
CVE-2021-44790US	critical9.8	96.8% (100th)	Exploit	no fix	2021-12-20	≤ 3.0
CVE-2017-9798US	high7.5	95.0% (100th)	Exploit	no fix	2017-09-18	≤ 3.0
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	≤ 3.0
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	no fix	2024-04-04	≤ 3.0
CVE-2020-11984US	critical9.8	90.0% (100th)	Exploit	no fix	2020-08-07	≤ 3.0
CVE-2025-1094US	—	90.0% (100th)	Exploit	no fix	2025-02-13	≤ 3.0
CVE-2017-15715US	high8.1	85.5% (100th)	Exploit	no fix	2018-03-26	≤ 3.0
CVE-2023-25690US	critical9.8	84.5% (100th)	Exploit	no fix	2023-03-07	≤ 3.0
CVE-2022-1292US	high7.3	82.6% (100th)	Exploit	no fix	2022-05-03	≤ 3.0
CVE-2019-10092US	medium6.1	81.5% (100th)	Exploit	no fix	2019-09-26	≤ 3.0
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	≤ 3.0
CVE-2023-50868US	high7.5	74.3% (99th)	Exploit	no fix	2024-02-14	≤ 3.0
CVE-2019-10098US	medium6.1	74.0% (99th)	Exploit	no fix	2019-09-25	≤ 3.0
CVE-2022-29885US	high7.5	73.5% (99th)	Exploit	no fix	2022-05-12	≤ 3.0
CVE-2025-6965US	high7.7	73.5% (99th)	Exploit	no fix	2025-07-15	≤ 3.0
CVE-2022-0778US	high7.5	73.2% (99th)	Exploit	no fix	2022-03-15	≤ 3.0
CVE-2024-38472US	—	69.5% (99th)	Exploit	no fix	2024-07-01	≤ 3.0
CVE-2023-43622US	high7.5	68.8% (99th)	Exploit	no fix	2023-10-23	≤ 3.0
CVE-2021-26690US	high7.5	65.3% (99th)	Exploit	no fix	2021-06-10	≤ 3.0
CVE-2024-47175US	critical9.8	63.6% (99th)	Exploit	no fix	2024-09-26	≤ 3.0
CVE-2021-3449US	medium5.9	63.5% (99th)	Exploit	no fix	2021-03-25	≤ 3.0
CVE-2019-9511US	high7.5	59.5% (99th)	Exploit	no fix	2019-08-13	≤ 3.0
CVE-2023-22809US	high7.8	55.4% (99th)	Exploit	no fix	2023-01-18	≤ 3.0
CVE-2021-23840US	high7.5	50.7% (99th)	Exploit	no fix	2021-02-16	≤ 3.0
CVE-2021-3712US	high7.4	50.4% (99th)	Exploit	no fix	2021-08-24	≤ 3.0
CVE-2024-38476US	critical9.8	41.6% (99th)	Exploit	no fix	2024-07-01	≤ 3.0
CVE-2017-7679US	critical9.8	39.3% (99th)	Exploit	no fix	2017-06-20	≤ 3.0
CVE-2024-32002US	critical9.0	29.2% (98th)	Exploit	no fix	2024-05-14	≤ 3.0
CVE-2022-22720US	critical9.8	28.2% (98th)	Exploit	no fix	2022-03-14	≤ 3.0
CVE-2007-4559US	medium6.8	27.1% (98th)	Exploit	no fix	2007-08-28	≤ 3.0
CVE-2024-38473US	—	25.9% (98th)	Exploit	no fix	2024-07-01	≤ 3.0
CVE-2022-4304US	medium5.9	23.5% (98th)	Exploit	no fix	2023-02-08	≤ 3.0

showing 50 of 1,078

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free155 CVEs
CWE-20Improper Input Validation137 CVEs
CWE-476NULL Pointer Dereference125 CVEs
CWE-787Out-of-bounds Write110 CVEs
CWE-125Out-of-bounds Read105 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer69 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')68 CVEs
CWE-401Missing Release of Memory after Effective Lifetime48 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)1,078 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan