ossec ossec

Name: ossec ossec
Brand: ossec

productUS

cpe:2.3:a:ossec:ossec:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical5high2medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-5284US	high7.2	2.43% (84th)	Exploit	no fix	2014-12-02	≤ 2.8.0
CVE-2015-3222US	high7.0	1.99% (81st)	Exploit	no fix	2017-09-07	4 versions
CVE-2020-8443US	critical9.8	2.69% (86th)	—	no fix	2020-01-30	2.7 → 3.5.0
CVE-2020-8444US	critical9.8	2.49% (85th)	—	no fix	2020-01-30	2.7 → 3.5.0
CVE-2020-8442US	high8.8	2.38% (84th)	—	no fix	2020-01-30	2.7 → 3.5.0
CVE-2020-8445US	critical9.8	2.28% (83rd)	—	no fix	2020-01-30	2.7 → 3.5.0
CVE-2020-8447US	critical9.8	1.94% (80th)	—	no fix	2020-01-30	2.7 → 3.5.0
CVE-2021-28040US	high7.5	1.19% (68th)	—	no fix	2021-03-05	= 3.6.0
CVE-2018-19666US	high7.8	0.78% (56th)	—	no fix	2018-11-29	≤ 3.1.0
CVE-2020-8446US	medium5.5	0.50% (43rd)	—	no fix	2020-01-30	2.7 → 3.5.0
CVE-2020-8448US	medium5.5	0.49% (42nd)	—	no fix	2020-01-30	2.7 → 3.5.0

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-264CWE-2642 CVEs
CWE-416Use After Free2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-193Off-by-one Error1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-674Uncontrolled Recursion1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.