cvs cvs

Name: cvs cvs
Brand: cvs

productUS

cpe:2.3:a:cvs:cvs:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical11high5medium2low

updated 2026-10-27

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2004-0396US	high7.5	67.5% (99th)	Exploit	no fix	2004-06-14	2 versions
CVE-2003-0015US	high7.5	23.9% (98th)	Exploit	no fix	2003-02-07	8 versions
CVE-2004-0416US	high10.0	13.2% (96th)	Exploit	no fix	2004-08-06	20 versions
CVE-2004-1471US	high7.1	7.72% (95th)	Exploit	no fix	2004-12-31	20 versions
CVE-2000-0680US	high7.2	1.34% (71st)	Exploit	no fix	2000-10-20	= 1.10.8
CVE-2000-0679US	low2.1	0.72% (54th)	Exploit	no fix	2000-10-20	= 1.10.8
CVE-2012-0804US	high10.0	8.37% (95th)	—	no fix	2012-05-29	2 versions
CVE-2004-0418US	high10.0	5.68% (93rd)	—	no fix	2004-08-06	20 versions
CVE-2005-0753US	high7.5	4.75% (92nd)	—	no fix	2005-04-18	17 versions
CVE-2004-0414US	high10.0	3.97% (90th)	—	no fix	2004-08-06	20 versions
CVE-2004-0417US	medium5.0	3.07% (88th)	—	no fix	2004-08-06	20 versions
CVE-2003-0977US	high7.5	2.47% (84th)	—	no fix	2004-01-05	10 versions
CVE-2004-0405US	medium5.0	2.35% (84th)	—	no fix	2004-06-01	≤ 1.10
CVE-2004-1342US	high7.5	2.28% (83rd)	—	no fix	2005-04-27	18 versions
CVE-2004-1343US	medium5.0	1.93% (80th)	—	no fix	2004-12-31	18 versions
CVE-2002-0092US	medium5.0	1.85% (79th)	—	no fix	2002-03-15	≤ 1.10.8
CVE-2004-0180US	low2.6	1.83% (79th)	—	no fix	2004-06-01	≤ 1.10
CVE-2005-2693US	medium4.6	0.44% (38th)	—	no fix	2005-08-26	= 1.12.12

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-28Path Traversal: '..\filedir'1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.