Vendor
Cert/cc
12 known vulnerabilities in products by Cert/cc, 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-40238 | A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5 | 8.8 | |
| Critical | CVE-2026-18749 | CERT/CC VINCE: Authorization Bypass Through User-Controlled Key | 9.8 | |
| Medium | CVE-2026-18744 | CERT/CC VINCE: Authorization Bypass Through User-Controlled Key | 6.5 | |
| High | CVE-2026-35467 | Private Key stored as extractable in browser IndexeDB | 7.5 | |
| Medium | CVE-2026-18750 | CERT/CC VINCE: Authorization Bypass Through User-Controlled Key | 5.3 | |
| Medium | CVE-2022-25799 | An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0 | 6.1 | |
| Medium | CVE-2026-8142 | CERT/CC VINCE: security vulnerability | 6.5 | |
| Medium | CVE-2026-35466 | Stored XSS via unsanitized input from remote service | 6.1 | |
| Medium | CVE-2024-9953 | Potential DoS Vulnerability in CERT VINCE Software Before Version 3.0.8 | 4.9 | |
| Medium | CVE-2022-40248 | An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4 | 5.4 | |
| Medium | CVE-2022-40257 | An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4 | 5.4 | |
| Medium | CVE-2024-10469 | CERT/CC VINCE: Incorrect Default Permissions | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
Products
| Vince | 5 | 0 |
| Vince - The Vulnerability Information And Coordination Environment | 4 | 0 |