nozominetworks cmc

Name: nozominetworks cmc
Brand: nozominetworks

productUS

cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical11high17medium0low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-0551US	high7.2	0.90% (60th)	—	22.0.0	2022-03-24	< 22.0.0
CVE-2022-0550US	high7.2	0.90% (60th)	—	22.0.0	2022-03-24	< 22.0.0
CVE-2023-32649US	high7.5	0.64% (51st)	—	23.1.0	2023-09-19	2 versions
CVE-2023-2567US	high8.8	0.62% (49th)	—	22.6.3	2023-09-19	2 versions
CVE-2023-22378US	medium6.5	0.61% (49th)	—	22.6.2	2023-08-09	< 22.6.2
CVE-2023-23574US	high8.8	0.61% (49th)	—	22.6.2	2023-08-09	< 22.6.2
CVE-2023-29245US	high7.4	0.60% (49th)	—	23.1.0	2023-09-19	2 versions
CVE-2023-23903US	medium4.9	0.60% (49th)	—	22.6.2	2023-08-09	< 22.6.2
CVE-2022-4259US	high8.8	0.60% (48th)	—	22.5.2	2023-05-04	< 22.5.2
CVE-2023-24015US	medium4.3	0.55% (46th)	—	22.6.2	2023-08-09	< 22.6.2
CVE-2026-31984US	—	0.51% (43rd)	—	26.2.0	2026-07-09	< 26.2.0
CVE-2023-24471US	medium6.5OT elevated	0.48% (41st)	—	22.6.2	2023-08-09	< 22.6.2
CVE-2023-5253US	high7.5OT elevated	0.45% (39th)	—	23.3.0	2024-01-15	< 23.3.0
CVE-2026-31983US	—OT elevated	0.44% (38th)	—	26.2.0	2026-07-09	< 26.2.0
CVE-2025-40889US	—	0.42% (36th)	—	25.2.0	2025-10-07	< 25.2.0
CVE-2025-40898US	—	0.40% (34th)	—	25.5.0	2025-12-18	< 25.5.0
CVE-2026-33390US	—	0.40% (34th)	—	26.2.0	2026-07-09	< 26.2.0
CVE-2023-22843US	medium4.8	0.33% (26th)	—	22.6.2	2023-08-09	< 22.6.2
CVE-2026-31982US	—	0.31% (23rd)	—	26.2.0	2026-07-09	< 26.2.0
CVE-2025-3719US	—OT elevated	0.27% (20th)	—	25.2.0	2025-10-07	< 25.2.0
CVE-2025-40886US	high8.8	0.27% (19th)	—	25.2.0	2025-10-07	< 25.2.0
CVE-2025-40892US	high8.9	0.26% (17th)	—	25.5.0	2025-12-18	< 25.5.0
CVE-2026-31981US	medium4.8	0.25% (17th)	—	26.2.0	2026-07-09	< 26.2.0
CVE-2025-40888US	medium6.5	0.24% (16th)	—	25.3.0	2025-10-07	< 25.3.0
CVE-2025-40887US	medium6.5	0.24% (16th)	—	25.2.0	2025-10-07	< 25.2.0
CVE-2025-40885US	medium6.5	0.24% (16th)	—	25.2.0	2025-10-07	< 25.2.0
CVE-2025-3718US	medium5.4	0.23% (14th)	—	25.2.0	2025-10-07	< 25.2.0
CVE-2024-4465US	medium5.0OT elevated	0.22% (13th)	—	24.2.0	2024-09-11	< 24.2.0
CVE-2025-40900US	—	0.20% (10th)	—	26.1.0	2026-05-19	< 26.1.0
CVE-2025-40893US	—	0.19% (9th)	—	25.5.0	2025-12-18	< 25.5.0
CVE-2025-40903US	medium4.8	0.19% (9th)	—	26.1.0	2026-05-19	< 26.1.0
CVE-2025-40902US	medium4.8	0.19% (9th)	—	26.1.0	2026-05-19	< 26.1.0
CVE-2025-40901US	medium4.8	0.19% (9th)	—	26.1.0	2026-05-19	< 26.1.0
CVE-2025-40904US	medium5.4	0.19% (8th)	—	26.1.0	2026-05-19	< 26.1.0
CVE-2025-40895US	—	0.18% (8th)	—	25.6.0	2026-03-04	< 25.6.0
CVE-2025-40891US	medium4.7	0.18% (7th)	—	25.5.0	2025-12-18	< 25.5.0
CVE-2025-40894US	medium5.4	0.17% (6th)	—	25.6.0	2026-03-04	< 25.6.0
CVE-2023-24477US	high7.0	0.15% (4th)	—	22.6.2	2023-08-09	< 22.6.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan