{ "schema": "https://cascadeatlas.com/schemas/evidence-receipt-v1.json", "receiptVersion": "1.0.0", "stableScope": { "type": "cve", "id": "CVE-2018-11776" }, "asKnown": { "generation": "gen-409cbd0c74ff4feb70e4944e6b98ce40", "cutoff": "2026-07-21T08:13:17.697275+00:00" }, "comparisonBasis": "gen-56ccdaf914f7b4be95b689ccae7dc20d", "materialChange": [ "No forward-evidence delta is recorded for this CVE in the selected generation." ], "sourceAssertions": [ { "field": "container", "state": "supported", "value": "Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.", "origin": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "source": "apache", "citation": "https://www.cve.org/CVERecord?id=CVE-2018-11776", "observedAt": "2026-07-19T04:27:06.398189+00:00", "originClass": "original_assertion", "providerEventAt": null }, { "field": "container", "state": "supported", "value": "CISA ADP Vulnrichment", "origin": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "source": "CISA-ADP", "citation": "https://www.cve.org/CVERecord?id=CVE-2018-11776", "observedAt": "2026-07-19T04:27:06.398189+00:00", "originClass": "independent_enrichment", "providerEventAt": null }, { "field": "container", "state": "supported", "value": "CVE Program Container", "origin": "af854a3a-2127-422b-91ae-364da2661108", "source": "CVE", "citation": "https://www.cve.org/CVERecord?id=CVE-2018-11776", "observedAt": "2026-07-19T04:27:06.398189+00:00", "originClass": "derivative_copy", "providerEventAt": null }, { "field": "observed_exploitation", "state": "supported", "value": "Apache Struts Remote Code Execution Vulnerability", "origin": "CISA", "source": "CISA KEV", "citation": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "observedAt": "2026-07-19T04:54:04.25158+00:00", "originClass": "original_assertion", "providerEventAt": "2026-07-16T17:00:15.6845+00:00" }, { "field": "model_probability", "state": "supported", "value": "Probability 0.999930000000; percentile 0.999870000000", "origin": "FIRST", "source": "FIRST EPSS", "citation": "https://www.first.org/epss/data_stats.html", "observedAt": "2026-07-19T04:54:35.756809+00:00", "originClass": "original_assertion", "providerEventAt": "2026-07-18T00:00:00+00:00" } ], "cvssAssessments": [ { "role": "Primary", "score": 8.1, "source": "nvd@nist.gov", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "severity": "HIGH", "sourceRank": 0, "originClass": "original_assertion", "scoreEligible": true, "validationState": "valid_match", "validatorVersion": "casca-cvss-v2:first-c5b0d409ae9f57c44264c6ce5f27d89298e1d32a:cvss-3.6-e342c6ad9c7eb69d2aebbbc2768a03cabd57eb947c806e145de5b936219833ea", "evidenceSourceClass": "nvd_enrichment_exact" }, { "role": "Primary", "score": 9.3, "source": "nvd@nist.gov", "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "severity": "HIGH", "sourceRank": 0, "originClass": "original_assertion", "scoreEligible": true, "validationState": "valid_match", "validatorVersion": "casca-cvss-v2:first-c5b0d409ae9f57c44264c6ce5f27d89298e1d32a:cvss-3.6-e342c6ad9c7eb69d2aebbbc2768a03cabd57eb947c806e145de5b936219833ea", "evidenceSourceClass": "nvd_enrichment_exact" }, { "role": "Secondary", "score": 8.1, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "severity": "HIGH", "sourceRank": 2, "originClass": "derivative_copy", "scoreEligible": true, "validationState": "valid_match", "validatorVersion": "casca-cvss-v2:first-c5b0d409ae9f57c44264c6ce5f27d89298e1d32a:cvss-3.6-e342c6ad9c7eb69d2aebbbc2768a03cabd57eb947c806e145de5b936219833ea", "evidenceSourceClass": "registered_adp_or_other" }, { "role": "unknown", "score": 8.1, "source": "CISA-ADP", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "severity": null, "sourceRank": null, "originClass": "independent_enrichment", "scoreEligible": false, "validationState": null, "validatorVersion": null, "evidenceSourceClass": "direct_cve_record_display_only" } ], "applicabilityScope": [ { "source": "apache", "status": "unknown", "vendor": "Apache Software Foundation", "product": "Apache Struts", "versions": "[{\"status\": \"affected\", \"version\": \"2.3 to 2.3.34\"}, {\"status\": \"affected\", \"version\": \"2.5 to 2.5.16\"}]" }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "apache", "groupId": "product-9cd0052bcd831ad951c3a83f953006d77d3ff2278903b02b620cad9fb02389e0:vulnerable_target", "product": "struts", "versions": "Any version (unconstrained) (>= 2.0.4, < 2.3.35); Any version (unconstrained) (>= 2.5.0, < 2.5.17)", "assertions": [ { "id": "ace5c62f-1253-453f-b1e2-a77b3ae4cc2f", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": "2.3.35", "vulnerable": true, "nodeNegated": false, "matchOrdinal": 0, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*", "versionStart": "2.0.4", "vendorIdentity": "vendor-8771dac0ae5eeec984ca23e4bbe5a243fb7896ad7c1c4afc6acd3abe53fdd152", "matchCriteriaId": "688f84a7-b698-4343-9f7b-fd68b2218035", "productIdentity": "product-9cd0052bcd831ad951c3a83f953006d77d3ff2278903b02b620cad9fb02389e0", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": false, "configurationOrdinal": 0, "versionRangeIdentity": "version-range-1b96728852c908194ab3334733f4a047808357673c4e9cb530c37a972fda546a", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": true, "officialRecordVersionId": "084bfdf5-e572-5190-a739-80149c10688f" }, { "id": "f286dffd-daa5-4a6f-a7c6-26cb5ae53711", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": "2.5.17", "vulnerable": true, "nodeNegated": false, "matchOrdinal": 1, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*", "versionStart": "2.5.0", "vendorIdentity": "vendor-8771dac0ae5eeec984ca23e4bbe5a243fb7896ad7c1c4afc6acd3abe53fdd152", "matchCriteriaId": "0d66d46c-389b-4c37-9eee-6301774719fa", "productIdentity": "product-9cd0052bcd831ad951c3a83f953006d77d3ff2278903b02b620cad9fb02389e0", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": false, "configurationOrdinal": 0, "versionRangeIdentity": "version-range-62a941555e044b064cfb6c7ebd9d16bfbb02ec1b0ed4e46c2fb99e4b644b2779", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": true, "officialRecordVersionId": "6a5ef276-4a4a-5e1b-bc6d-e3bd11e56117" } ], "identityId": "product-9cd0052bcd831ad951c3a83f953006d77d3ff2278903b02b620cad9fb02389e0", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Any version (unconstrained) (>= 2.0.4, < 2.3.35)", "Any version (unconstrained) (>= 2.5.0, < 2.5.17)" ], "assertionCount": 2, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "netapp", "groupId": "product-7622e4e001e04d07e68c37d95f4e8879bc2e631632b5d522e6504407a3f05f79:vulnerable_target", "product": "active_iq_unified_manager", "versions": "Any version (unconstrained) (>= 7.3); Any version (unconstrained) (>= 9.5)", "assertions": [ { "id": "2034073e-349a-4519-a61e-c50ff373b800", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 0, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*", "versionStart": "7.3", "vendorIdentity": "vendor-d1dcf2e2192106a1eb34744930a80b83005fa5d60195c923256e69ac39974aed", "matchCriteriaId": "bd075607-09b7-493e-8611-66d041ffda62", "productIdentity": "product-7622e4e001e04d07e68c37d95f4e8879bc2e631632b5d522e6504407a3f05f79", "platformIdentity": "platform-cd33e9d7d0bc06b88dd753fb535be17dc926424fde1155774b858b770a302b3a", "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 1, "versionRangeIdentity": "version-range-c7eccea7cd298d64cb5991648b48e5fee7ec3e79038bc27143ca448e8a3a37c6", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": true, "officialRecordVersionId": "b446a2d9-9c3f-540c-a0fd-09f89a66168c" }, { "id": "598e24a3-19d7-463a-aa3f-b589a6fc56ba", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 1, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*", "versionStart": "9.5", "vendorIdentity": "vendor-d1dcf2e2192106a1eb34744930a80b83005fa5d60195c923256e69ac39974aed", "matchCriteriaId": "0cb28af5-5af0-4475-a7b6-12e1795ffdcb", "productIdentity": "product-7622e4e001e04d07e68c37d95f4e8879bc2e631632b5d522e6504407a3f05f79", "platformIdentity": "platform-4f855948f8166c6b9dd8554d834c2d7a51b44fcf52dc3e6fd03c0f0d8780f3fe", "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 1, "versionRangeIdentity": "version-range-6f02d1a67f56119ce98c547bfb8bac44c8311d2116e461abf29bc283e9a437d2", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": true, "officialRecordVersionId": "8f0eb8f3-62da-5ce4-9f5b-c111a3230ddf" } ], "identityId": "product-7622e4e001e04d07e68c37d95f4e8879bc2e631632b5d522e6504407a3f05f79", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Any version (unconstrained) (>= 7.3)", "Any version (unconstrained) (>= 9.5)" ], "assertionCount": 2, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "netapp", "groupId": "product-6bac5e5dc0babe5d628e246786e711716ddfb068132218ad0dd5123beb466ec4:vulnerable_target", "product": "oncommand_insight", "versions": "Version not applicable", "assertions": [ { "id": "2ce4bb6f-ec72-45d0-a682-807edb9fefc7", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 2, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-d1dcf2e2192106a1eb34744930a80b83005fa5d60195c923256e69ac39974aed", "matchCriteriaId": "f1be6c1f-2565-4e97-92aa-16563e5660a5", "productIdentity": "product-6bac5e5dc0babe5d628e246786e711716ddfb068132218ad0dd5123beb466ec4", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 1, "versionRangeIdentity": "version-range-ebc3a4f75159c713dd2b3c0b30a3d09986e88fc92a0e219cf36c0d09928db653", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "efa46f5f-fea6-5982-9e35-e87e89fca147" } ], "identityId": "product-6bac5e5dc0babe5d628e246786e711716ddfb068132218ad0dd5123beb466ec4", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Version not applicable" ], "assertionCount": 1, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "netapp", "groupId": "product-afac260708bb4bb1a51e28ce6b95f0356203366f8c8ffd2c790c3109033fc4fd:vulnerable_target", "product": "oncommand_workflow_automation", "versions": "Version not applicable", "assertions": [ { "id": "96f53666-8d72-4b76-80ac-a542353af37c", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 3, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-d1dcf2e2192106a1eb34744930a80b83005fa5d60195c923256e69ac39974aed", "matchCriteriaId": "5735e553-9731-4aac-bcff-989377f817b3", "productIdentity": "product-afac260708bb4bb1a51e28ce6b95f0356203366f8c8ffd2c790c3109033fc4fd", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 1, "versionRangeIdentity": "version-range-f6901c14c5e0e5ce5e3b637b3daa4f0d88d80604006ee97c2e507171da3df12b", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "30a9b8ec-5a6c-56aa-a17e-f7d32d5e1fd8" } ], "identityId": "product-afac260708bb4bb1a51e28ce6b95f0356203366f8c8ffd2c790c3109033fc4fd", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Version not applicable" ], "assertionCount": 1, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "netapp", "groupId": "product-72194eb69952d9519f325006ffebfb4101503889dc70b262bb3ce2ae0ce452a2:vulnerable_target", "product": "snapcenter", "versions": "Version not applicable", "assertions": [ { "id": "719976d7-febe-44e0-94b5-4a43e74bde1f", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 4, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-d1dcf2e2192106a1eb34744930a80b83005fa5d60195c923256e69ac39974aed", "matchCriteriaId": "bdfb1169-41a0-4a86-8e4f-fda9730b1e94", "productIdentity": "product-72194eb69952d9519f325006ffebfb4101503889dc70b262bb3ce2ae0ce452a2", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 1, "versionRangeIdentity": "version-range-736c62e0a692f5f64ce047f2403b38340d7c3a3c04f3fb417e93271f9873d45e", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "f6965ccd-72b0-5ad3-951d-50aa0918fe03" } ], "identityId": "product-72194eb69952d9519f325006ffebfb4101503889dc70b262bb3ce2ae0ce452a2", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Version not applicable" ], "assertionCount": 1, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "oracle", "groupId": "product-d355b11887e16a673439034955f56c1713687fe0ddcca9e46745eb07d77aae8b:vulnerable_target", "product": "communications_policy_management", "versions": "Any version (unconstrained) (< 12.5.0)", "assertions": [ { "id": "c56dbbf3-994c-487b-8b06-aa38b75217f9", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": "12.5.0", "vulnerable": true, "nodeNegated": false, "matchOrdinal": 0, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55", "matchCriteriaId": "0e8af73e-8ac6-4f65-a6f0-dbb2cc7a613f", "productIdentity": "product-d355b11887e16a673439034955f56c1713687fe0ddcca9e46745eb07d77aae8b", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": false, "configurationOrdinal": 2, "versionRangeIdentity": "version-range-8d7bd4ed5cc58b8f89999f2df9adf51111c6519e74d5dc7fbbfd09a473f77abf", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "46f95359-15ee-55d7-bf21-22293055f4d7" } ], "identityId": "product-d355b11887e16a673439034955f56c1713687fe0ddcca9e46745eb07d77aae8b", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Any version (unconstrained) (< 12.5.0)" ], "assertionCount": 1, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "oracle", "groupId": "product-3c4aa68ebd05c096ade3c96e36c96721c931455c324c5da69df15a2fee41a8fd:vulnerable_target", "product": "enterprise_manager_base_platform", "versions": "Version 13.3.0.0; Version 13.4.0.0", "assertions": [ { "id": "3e0fc636-7ac4-4c0a-b4db-9fc0c2b55a96", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 1, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55", "matchCriteriaId": "7582b307-3899-4bbb-b868-bc912a4d0109", "productIdentity": "product-3c4aa68ebd05c096ade3c96e36c96721c931455c324c5da69df15a2fee41a8fd", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 2, "versionRangeIdentity": "version-range-aff54365fedddb2e0e6eff62e65e0dba54a3b881e2b369eefd0bd1f751760088", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "903ff3d3-62e0-577a-ad3a-22472d7932ae" }, { "id": "5163ac08-d307-465c-b813-4dbb7c436905", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": null, "vulnerable": true, "nodeNegated": false, "matchOrdinal": 2, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55", "matchCriteriaId": "d26f3e23-f1a9-45e7-9e5f-0c0a24ee3783", "productIdentity": "product-3c4aa68ebd05c096ade3c96e36c96721c931455c324c5da69df15a2fee41a8fd", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": null, "configurationOrdinal": 2, "versionRangeIdentity": "version-range-8dcb5c74e642b30c94c55b64bdf1192078d35c37155272e48180dae462a5112b", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "6447d2e1-217b-5a32-baaa-7eec53f16f67" } ], "identityId": "product-3c4aa68ebd05c096ade3c96e36c96721c931455c324c5da69df15a2fee41a8fd", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Version 13.3.0.0", "Version 13.4.0.0" ], "assertionCount": 2, "officialLinkStates": [ "linked_exact" ] }, { "part": "Application", "source": "NVD CPE", "status": "supported", "vendor": "oracle", "groupId": "product-57d551f18f44e8d3873b139bff1d5a2db2f13c717b3d0295e687bd95ab213fac:vulnerable_target", "product": "mysql_enterprise_monitor", "versions": "Any version (unconstrained) (<= 3.4.9.4237); Any version (unconstrained) (>= 4.0.0, <= 4.0.6.5281); Any version (unconstrained) (>= 8.0.0, <= 8.0.2.8191)", "assertions": [ { "id": "2116bf91-b441-4263-9c93-51f69fe351b8", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": "4.0.6.5281", "vulnerable": true, "nodeNegated": false, "matchOrdinal": 4, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*", "versionStart": "4.0.0", "vendorIdentity": "vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55", "matchCriteriaId": "ef71d94f-efc5-4390-a380-ac0e5db05516", "productIdentity": "product-57d551f18f44e8d3873b139bff1d5a2db2f13c717b3d0295e687bd95ab213fac", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": true, "configurationOrdinal": 2, "versionRangeIdentity": "version-range-755d03fb1f5c78946800818f35201f140a833197ebf4e90a0ee17ec066f2c1e8", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": true, "officialRecordVersionId": "ad9f6b33-76ee-5d2d-a5f1-3e4741928811" }, { "id": "5f46fe8c-4205-42ee-9dd1-5b42448cef6e", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": "3.4.9.4237", "vulnerable": true, "nodeNegated": false, "matchOrdinal": 3, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*", "versionStart": null, "vendorIdentity": "vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55", "matchCriteriaId": "8a94b32d-6b5f-4e42-8345-4f9126a89435", "productIdentity": "product-57d551f18f44e8d3873b139bff1d5a2db2f13c717b3d0295e687bd95ab213fac", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": true, "configurationOrdinal": 2, "versionRangeIdentity": "version-range-8c0cea18a12500f639460c3586782dfb63d0c8e8ca1632315aa5f275650fc01d", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": null, "officialRecordVersionId": "b247ce35-53f1-55eb-8643-2552230c1297" }, { "id": "c8b531f0-41cc-4b20-a409-880221a5c1ad", "nodePath": "node/0", "observedAt": "2026-07-19T04:45:04.429288+00:00", "targetRole": "vulnerable_target", "versionEnd": "8.0.2.8191", "vulnerable": true, "nodeNegated": false, "matchOrdinal": 5, "nodeOperator": "OR", "rawCriterion": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*", "versionStart": "8.0.0", "vendorIdentity": "vendor-b1377626da187dbea1eeb98f365c57a3dcbeccfdc2a7d3471e94ece7b6f88e55", "matchCriteriaId": "33efaf19-a639-47ad-9cdc-d174c91f0f00", "productIdentity": "product-57d551f18f44e8d3873b139bff1d5a2db2f13c717b3d0295e687bd95ab213fac", "platformIdentity": null, "officialLinkState": "linked_exact", "versionEndInclusive": true, "configurationOrdinal": 2, "versionRangeIdentity": "version-range-78dad560d4eed5f29b6e8443d2876d8d75a8fe88dcb20b6d57d16af0b017080b", "configurationRevision": "nvd-json-2.0-configuration-v1", "versionStartInclusive": true, "officialRecordVersionId": "b00a3760-36bf-5e94-b81b-f41ddac10715" } ], "identityId": "product-57d551f18f44e8d3873b139bff1d5a2db2f13c717b3d0295e687bd95ab213fac", "targetRole": "vulnerable_target", "identityState": "canonical_exact", "versionRanges": [ "Any version (unconstrained) (<= 3.4.9.4237)", "Any version (unconstrained) (>= 4.0.0, <= 4.0.6.5281)", "Any version (unconstrained) (>= 8.0.0, <= 8.0.2.8191)" ], "assertionCount": 3, "officialLinkStates": [ "linked_exact" ] } ], "identitySources": [ { "runId": "27d65b0f-b718-4b4f-bb79-c47c68d09dfa", "corpus": "cpe_dictionary", "manifest": { "runId": "27d65b0f-b718-4b4f-bb79-c47c68d09dfa", "corpus": "cpe_dictionary", "sequence": 27, "finishedAt": "2026-07-21T06:45:29.809553Z", "parsedItems": 1775266, "observations": [ { "route": "cpe_dictionary_meta", "ordinal": 1, "observedAt": "2026-07-21T06:20:20.776345Z", "artifactSha256": "cb514bd5e9e6b1cc779d0a3a5ae11925caa6659e2f0263ba6f97c4ac0cdcda78", "sourceIdentity": { "corpus": "cpe_dictionary", "zip_size": 81108160, "meta_sha256": "cb514bd5e9e6b1cc779d0a3a5ae11925caa6659e2f0263ba6f97c4ac0cdcda78", "retrieved_at": "2026-07-20 22:53:54.609641+00:00", "expanded_size": 861061675, "last_modified": "2026-07-17 23:50:02-04:00", "schema_version": "nvd-cpe-api-2.0-product-v1", "expanded_sha256": "baba496209695ef5f97bd1f4ce9b2a3faa02f2e616c3b0b46f016f950bf42564" } }, { "route": "cpe_dictionary_archive", "ordinal": 2, "observedAt": "2026-07-21T06:20:20.804325Z", "artifactSha256": "5860afe11e8ee298754b5c2c09d7cb71d663a1f5ff77f6bc9331dc5511c00c84", "sourceIdentity": { "corpus": "cpe_dictionary", "zip_size": 81108160, "meta_sha256": "cb514bd5e9e6b1cc779d0a3a5ae11925caa6659e2f0263ba6f97c4ac0cdcda78", "retrieved_at": "2026-07-20 22:54:33.680364+00:00", "expanded_size": 861061675, "last_modified": "2026-07-17 23:50:02-04:00", "archive_sha256": "5860afe11e8ee298754b5c2c09d7cb71d663a1f5ff77f6bc9331dc5511c00c84", "schema_version": "nvd-cpe-api-2.0-product-v1", "source_members": [ "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00001.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00002.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00003.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00004.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00005.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00006.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00007.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00008.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00009.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00010.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00011.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00012.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00013.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00014.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00015.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00016.json", "nvdcpe-2.0-chunks/nvdcpe-2.0-chunk-00017.json" ], "expanded_sha256": "baba496209695ef5f97bd1f4ce9b2a3faa02f2e616c3b0b46f016f950bf42564", "source_member_count": 17, "source_member_set_sha256": "4688f87576cc30c3d83f89a73717c650acca6ec24cb239df61bc0ad32591ee94" } } ], "registryRevision": "public-core-20260720.2", "providerHighWater": "2026-07-18T03:50:02.000000Z" }, "recordCount": 1775266, "artifactCount": 2, "approvedObservationCutoff": "2026-07-21T06:45:29.809553+00:00" }, { "runId": "955dae73-7302-438b-aee1-058d7cc5d48e", "corpus": "cpe_match", "manifest": { "runId": "955dae73-7302-438b-aee1-058d7cc5d48e", "corpus": "cpe_match", "sequence": 28, "finishedAt": "2026-07-21T08:13:17.697275Z", "parsedItems": 643502, "observations": [ { "route": "cpe_match_meta", "ordinal": 1, "observedAt": "2026-07-21T06:52:36.925245Z", "artifactSha256": "1abd00f9fca8775685bb99bb1d1805bdbc53f29e10ea2a77878dd15b389ce334", "sourceIdentity": { "corpus": "cpe_match", "zip_size": 787429881, "meta_sha256": "1abd00f9fca8775685bb99bb1d1805bdbc53f29e10ea2a77878dd15b389ce334", "retrieved_at": "2026-07-20 23:16:37.357540+00:00", "expanded_size": 3474084734, "last_modified": "2026-07-17 23:40:00-04:00", "schema_version": "nvd-cpe-api-2.0-match-v2", "expanded_sha256": "449d8d0e40174173a08625f1e289a591570c7a129499e97d370a53d2054e1988" } }, { "route": "cpe_match_archive", "ordinal": 2, "observedAt": "2026-07-21T06:52:36.953311Z", "artifactSha256": "3bde1b540698424b4d72edc7f54a32d64a3a202f4ae5765d5aee4ac6f026c49e", "sourceIdentity": { "corpus": "cpe_match", "zip_size": 787429881, "meta_sha256": "1abd00f9fca8775685bb99bb1d1805bdbc53f29e10ea2a77878dd15b389ce334", "retrieved_at": "2026-07-20 23:27:10.816115+00:00", "expanded_size": 3474084734, "last_modified": "2026-07-17 23:40:00-04:00", "archive_sha256": "3bde1b540698424b4d72edc7f54a32d64a3a202f4ae5765d5aee4ac6f026c49e", "schema_version": "nvd-cpe-api-2.0-match-v2", "source_members": [ "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00001.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00002.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00003.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00004.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00005.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00006.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00007.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00008.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00009.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00010.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00011.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00012.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00013.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00014.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00015.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00016.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00017.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00018.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00019.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00020.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00021.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00022.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00023.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00024.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00025.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00026.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00027.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00028.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00029.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00030.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00031.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00032.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00033.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00034.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00035.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00036.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00037.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00038.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00039.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00040.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00041.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00042.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00043.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00044.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00045.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00046.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00047.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00048.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00049.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00050.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00051.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00052.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00053.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00054.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00055.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00056.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00057.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00058.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00059.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00060.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00061.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00062.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00063.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00064.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00065.json", "nvdcpematch-2.0-chunks/nvdcpematch-2.0-chunk-00066.json" ], "expanded_sha256": "449d8d0e40174173a08625f1e289a591570c7a129499e97d370a53d2054e1988", "source_member_count": 66, "source_member_set_sha256": "c8a481301b1da2ba0a5e990c07e40e88fe95dc232efafbb6fdeacc2a5a11e0d8" } } ], "registryRevision": "public-core-20260720.2", "providerHighWater": "2026-07-18T03:40:00.000000Z" }, "recordCount": 643502, "artifactCount": 2, "approvedObservationCutoff": "2026-07-21T08:13:17.697275+00:00" } ], "identitySummary": { "truncated": false, "returnedGroups": 8, "totalAssertions": 13, "targetAssertions": 13, "canonicalProducts": 8, "configurationNodes": 3, "officialLinkStates": { "linked_exact": 13 }, "returnedAssertions": 13, "constraintAssertions": 0 }, "identityQuality": { "sampled_rows": 10000, "cpe_name_rows": 1775266, "cve_match_rows": 3136953, "sampled_errors": 0, "parser_revision": "cpe23-nistir7695-fs-v2", "mapping_revision": "cpe23-exact-mapping-v1", "identity_revision": "cpe23-exact-identity-v1", "mapped_vendor_rows": 3136941, "mapped_product_rows": 3136940, "match_criteria_rows": 643502, "bounds_mismatch_rows": 0, "official_linked_rows": 3136953, "specific_vendor_rows": 3136941, "missing_match_id_rows": 0, "specific_product_rows": 3136940, "criteria_mismatch_rows": 0, "parsed_projection_rows": 3136953, "mapping_correction_rows": 0, "deprecated_cpe_name_rows": 98614, "identity_domain_revision": "cpe23-exact-typed-component-domain-v1", "absent_official_match_rows": 0, "active_match_criteria_rows": 562881, "inactive_official_match_rows": 0, "conformant_match_criteria_rows": 643197, "nonconformant_match_criteria_rows": 305, "nonconformant_official_match_rows": 0, "nonconformant_identity_component_rows": 301, "active_nonconformant_match_criteria_rows": 8 }, "priority": { "lower": 80.24929998775, "point": 80.24929998775, "upper": 98.24929998775, "policy": "public-priority-v1.0.1", "conflict": true, "coverage": 0.725, "derivation": { "factorA": { "lower": "40.000000000000", "point": "40.000000000000", "state": "known", "upper": "40.000000000000", "reason": "cisa_kev_membership", "completeness": "1.000000000000" }, "factorB": { "lower": "19.999299987750", "point": "19.999299987750", "state": "known", "upper": "19.999299987750", "transform": "20*sqrt(p)", "probability": "0.999930000000", "completeness": "1.000000000000" }, "factorC": { "lower": "20.250000000000", "point": "20.250000000000", "state": "conflicted", "upper": "23.250000000000", "completeness": "0.500000000000", "selected_role": "Primary", "selected_source": "nvd@nist.gov", "selection_order": [ "role_rank", "version_rank", "source_rank", "provider", "vector", "metric_id" ], "selected_version": "3.1", "material_conflict": true, "selected_metric_id": "80349998-da09-4b8f-846a-de5cad7e305c", "eligible_metric_ids": [ "07182027-3282-41a5-b805-42db051db10b", "80349998-da09-4b8f-846a-de5cad7e305c", "c72cd4cb-e9c5-455e-86d2-b7db9551227d" ], "official_severities": [ "High" ], "selected_base_score": "8.1", "distinct_base_scores": [ "8.1", "9.3" ], "selected_source_rank": 0, "selected_source_class": "nvd_enrichment_exact" }, "factorD": { "lower": "0.000000000000", "point": "0.000000000000", "state": "unknown", "upper": "15.000000000000", "reason": "no_accepted_canonical_mapping_obligation_ledger_in_public_core", "completeness": "0.000000000000" }, "crossedBands": [ "P1" ], "definitiveBand": null, "displayRounding": "one_decimal_floor", "evidencePolicyVersion": "evidence-policy-v1.0.1", "evidenceSelectionRevision": "casca-evidence-selection-0.1.1" }, "evidenceIds": [ "cvss:07182027-3282-41a5-b805-42db051db10b", "cvss:80349998-da09-4b8f-846a-de5cad7e305c", "cvss:c72cd4cb-e9c5-455e-86d2-b7db9551227d", "epss:8e526c67-933c-4a50-a5fe-9e0f91349a63", "kev:a1a5e85d-65ee-46f7-bbc6-42253d7f4e6f" ] }, "supportConflictCorrectionUnknown": { "conflict": true, "limitations": [ "KEV membership is authoritative for the catalog, not proof of exposure in any environment.", "EPSS is a dated model probability and not an individual-environment prediction.", "Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.", "NVD-carried upstream facts remain derivative and are not independent corroboration.", "Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.", "NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.", "Factor D remains unknown because WC-03 has not converted canonical CPE mappings into generation-bound mapping obligations; canonical identity alone does not score applicability.", "Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred." ], "correctionState": "none_observed" }, "sourceCutoffs": [ { "source": "apache", "observedAt": "2026-07-19T04:27:06.398189+00:00", "citation": "https://www.cve.org/CVERecord?id=CVE-2018-11776" }, { "source": "CISA-ADP", "observedAt": "2026-07-19T04:27:06.398189+00:00", "citation": "https://www.cve.org/CVERecord?id=CVE-2018-11776" }, { "source": "CVE", "observedAt": "2026-07-19T04:27:06.398189+00:00", "citation": "https://www.cve.org/CVERecord?id=CVE-2018-11776" }, { "source": "CISA KEV", "observedAt": "2026-07-19T04:54:04.25158+00:00", "citation": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "source": "FIRST EPSS", "observedAt": "2026-07-19T04:54:35.756809+00:00", "citation": "https://www.first.org/epss/data_stats.html" }, { "source": "CVE Program cvelistV5 (constrained; 367153 records; 0 gaps)", "observedAt": "2026-07-19 01:52:06+00:00", "citation": "https://www.cve.org/legal/termsofuse", "providerKey": "CVE", "freshnessState": "constrained", "recordCount": 367153, "gapCount": 0, "runs": [ { "label": "baseline", "runId": "cc2e0e5b-7758-40c1-b6b2-9fb6d15eb5c0", "outcomes": { "accepted_new": 367149, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 2, "accepted_deletion_notice": 0 }, "sequence": 1, "artifacts": [ "5c697be038b3803775edeac0623b28ff90461cdccaea36a7f5bb55688c31b31c" ], "finishedAt": "2026-07-19 04:34:11.826549+00:00", "observedAt": [ "2026-07-19 04:27:06.398189+00:00" ], "parsedItems": 367151, "providerHighWater": "2026-07-19 01:52:06+00:00" }, { "label": "delta", "runId": "91dd59c9-a262-4a7b-b90c-189c19487a6b", "outcomes": { "accepted_new": 4, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 4, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 2, "artifacts": [ "02b67af039959c123a40f6451d529894c98402dede7e4ab0c1cbd04d4db661d8" ], "finishedAt": "2026-07-19 04:35:17.442091+00:00", "observedAt": [ "2026-07-19 04:35:17.318120+00:00" ], "parsedItems": 8, "providerHighWater": "2026-07-19 01:52:06+00:00" } ] }, { "source": "FIRST Exploit Prediction Scoring System (supported; 349390 records; 0 gaps)", "observedAt": "2026-07-18 12:03:17+00:00", "citation": "https://www.first.org/epss/faq", "providerKey": "EPSS", "freshnessState": "supported", "recordCount": 349390, "gapCount": 0, "runs": [ { "label": "v2026.06.15", "runId": "669924e5-aae9-40fe-a736-dea112b7dd57", "outcomes": { "accepted_new": 349390, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 1, "artifacts": [ "1407cdc8345a7617ec99696affdbc946cc5e5af74ac3f4f413902a8b64f36b48" ], "finishedAt": "2026-07-19 04:57:09.375853+00:00", "observedAt": [ "2026-07-19 04:54:35.756809+00:00" ], "parsedItems": 349390, "providerHighWater": "2026-07-18 12:03:17+00:00" } ] }, { "source": "CISA Known Exploited Vulnerabilities Catalog (constrained; 1647 records; 0 gaps)", "observedAt": "2026-07-16 17:00:15.684500+00:00", "citation": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "providerKey": "KEV", "freshnessState": "constrained", "recordCount": 1647, "gapCount": 0, "runs": [ { "label": "2026.07.16", "runId": "be38a4d2-17d7-4257-80f5-9b389d50265b", "outcomes": { "accepted_new": 1647, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 1, "artifacts": [ "41d27023a5912a49ca2b06370550fa6da50e35794c269766a6332618d82f243e" ], "finishedAt": "2026-07-19 04:54:05.090445+00:00", "observedAt": [ "2026-07-19 04:54:04.251580+00:00" ], "parsedItems": 1647, "providerHighWater": "2026-07-16 17:00:15.684500+00:00" } ] }, { "source": "NIST National Vulnerability Database (supported; 367177 records; 0 gaps)", "observedAt": "2026-07-19 00:00:11+00:00", "citation": "https://nvd.nist.gov/developers/terms-of-use", "providerKey": "NVD", "freshnessState": "supported", "recordCount": 367177, "gapCount": 0, "runs": [ { "label": "2002", "runId": "f28758f2-f881-4768-9eb5-2244a253b664", "outcomes": { "accepted_new": 6771, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 1, "artifacts": [ "d43cdfebbb386b0ae5241ef9dc91e438b40d657ad667a4d5a2240016db1580fc", "c058c6695adcf08e63f8ecfced69abe0750372946fe211b0f4d1ef38f33027a2" ], "finishedAt": "2026-07-19 04:40:31.593285+00:00", "observedAt": [ "2026-07-19 04:40:26.275011+00:00", "2026-07-19 04:40:26.298925+00:00" ], "parsedItems": 6771, "providerHighWater": "2026-06-22 14:34:49+00:00" }, { "label": "2003", "runId": "f519faef-f891-4703-b077-e994256f4ecf", "outcomes": { "accepted_new": 1555, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 2, "artifacts": [ "72aa0ac9bfb18981c9d234aba4011cb7f782c5a9ac99759f9e8ed238993dec0c", "ac572e532c490314fee4804e342bc880eeaf9512eacb6cbae9dff8a47185ff00" ], "finishedAt": "2026-07-19 04:41:13.528045+00:00", "observedAt": [ "2026-07-19 04:41:11.953363+00:00", "2026-07-19 04:41:11.977302+00:00" ], "parsedItems": 1555, "providerHighWater": "2026-06-22 14:34:47+00:00" }, { "label": "2004", "runId": "a98e66a2-e534-4076-a6f4-27a148762ddf", "outcomes": { "accepted_new": 2707, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 3, "artifacts": [ "e0342d7d87b172522d19f7ec38508582b0201297afe6915a22e5748fb3f5226f", "df76e8ac8edf1400b99bda92733749abb66f000c0f41a1ef575c5969c7cb09aa" ], "finishedAt": "2026-07-19 04:41:18.855311+00:00", "observedAt": [ "2026-07-19 04:41:15.626981+00:00", "2026-07-19 04:41:15.650922+00:00" ], "parsedItems": 2707, "providerHighWater": "2026-06-22 14:34:45+00:00" }, { "label": "2005", "runId": "6b449ed1-c43d-4fa2-b560-5f5310220228", "outcomes": { "accepted_new": 4770, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 4, "artifacts": [ "7c39b543c44bd4c080d64cbafdc7359e150b96be39de1e3282648255b48bcde3", "09e38e5e0c0865697ff6030f8c3f568c8649fd213361cffd167022c02e2d2223" ], "finishedAt": "2026-07-19 04:41:25.791813+00:00", "observedAt": [ "2026-07-19 04:41:20.927237+00:00", "2026-07-19 04:41:20.951188+00:00" ], "parsedItems": 4770, "providerHighWater": "2026-07-15 07:04:09+00:00" }, { "label": "2006", "runId": "b53dca71-d5db-4840-8039-3716ebb110ed", "outcomes": { "accepted_new": 7145, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 5, "artifacts": [ "8758dc72b5f5c79b63012021ead61127f9d5162bf0c4054d2073ba2b84d2396e", "e71fa64982f904dace01686d5b4f00710f4df493beff1f6ae05925faf7080951" ], "finishedAt": "2026-07-19 04:41:35.592352+00:00", "observedAt": [ "2026-07-19 04:41:28.847806+00:00", "2026-07-19 04:41:28.871740+00:00" ], "parsedItems": 7145, "providerHighWater": "2026-07-15 07:04:04+00:00" }, { "label": "2007", "runId": "81029fee-eb7c-43ad-a375-535cfe96637d", "outcomes": { "accepted_new": 6580, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 6, "artifacts": [ "74ce3a0b6367c6902f1c03c78b858db9978c678a0bff1f3992b513816df85b97", "10d34d393d8a52f77b18bca98ec922f352f3efe63ca5671968ac3511e0ec9d17" ], "finishedAt": "2026-07-19 04:41:46.638894+00:00", "observedAt": [ "2026-07-19 04:41:40.506803+00:00", "2026-07-19 04:41:40.530734+00:00" ], "parsedItems": 6580, "providerHighWater": "2026-06-22 14:34:32+00:00" }, { "label": "2008", "runId": "48a1ffe9-1ee9-4609-ab02-ee73e27cd65a", "outcomes": { "accepted_new": 7179, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 7, "artifacts": [ "83af0e4947eee2700f36a92ebb7b27f370c2bea85c1fb47f6f0ab22af957578f", "1f66584e5299779f05fecd0f6235b03d0d1254471c486ec8081a7d67c23718eb" ], "finishedAt": "2026-07-19 04:42:00.279087+00:00", "observedAt": [ "2026-07-19 04:41:52.148004+00:00", "2026-07-19 04:41:52.171924+00:00" ], "parsedItems": 7179, "providerHighWater": "2026-07-14 07:02:57+00:00" }, { "label": "2009", "runId": "441ef725-ae6d-4003-b986-b8f8e464c9bf", "outcomes": { "accepted_new": 5054, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 8, "artifacts": [ "f26887f4fc913fdbcb1e47838bcc8004e6bf89b0cdb25605766ad684e909a76d", "1e1c12cbcaeac0236d626e1532726a90d88658e8b5b18fe716ecc614acfc2b4d" ], "finishedAt": "2026-07-19 04:42:14.470970+00:00", "observedAt": [ "2026-07-19 04:42:04.997147+00:00", "2026-07-19 04:42:05.021078+00:00" ], "parsedItems": 5054, "providerHighWater": "2026-07-11 07:02:43+00:00" }, { "label": "2010", "runId": "3dbe4b1e-4ae5-45e3-93d2-98920a33fa40", "outcomes": { "accepted_new": 5249, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 9, "artifacts": [ "c03ef1ab6db13d4ddf375f77a9af61f6aedfbd50c1de1143056248eee4812645", "6772cfcdf1e7751f1084414a0a6ddaec29cf7fbbdefae930ca550de183401049" ], "finishedAt": "2026-07-19 04:42:31.099169+00:00", "observedAt": [ "2026-07-19 04:42:20.934883+00:00", "2026-07-19 04:42:20.958808+00:00" ], "parsedItems": 5249, "providerHighWater": "2026-07-15 07:03:59+00:00" }, { "label": "2011", "runId": "46e783e6-e0ed-4f3f-a1e5-23f47b928805", "outcomes": { "accepted_new": 4899, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 10, "artifacts": [ "18cca9cde907902830e348ceb36a054f53a677d9690861966ca595a5cdd135e8", "f59332d6734ab0e4b72f41bbf58b7ce6e95e296fefff7994331b108b36fa5201" ], "finishedAt": "2026-07-19 04:42:47.645498+00:00", "observedAt": [ "2026-07-19 04:42:36.841677+00:00", "2026-07-19 04:42:36.865556+00:00" ], "parsedItems": 4899, "providerHighWater": "2026-07-10 07:03:18+00:00" }, { "label": "2012", "runId": "7277f927-99b9-4512-9a62-72f74cb20582", "outcomes": { "accepted_new": 5939, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 11, "artifacts": [ "d983d1873c8ddf8377f03b84143fecdf74b53a21756618db56b76bd69cfeb572", "cae8543be30f4937c7c7a947ab1531c2d6e3b7276ac79ff4b2d5c851775546dd" ], "finishedAt": "2026-07-19 04:43:06.698883+00:00", "observedAt": [ "2026-07-19 04:42:54.309272+00:00", "2026-07-19 04:42:54.333174+00:00" ], "parsedItems": 5939, "providerHighWater": "2026-06-22 14:34:02+00:00" }, { "label": "2013", "runId": "d40b272e-d0c5-49b2-b954-ec4df65d9931", "outcomes": { "accepted_new": 6830, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 12, "artifacts": [ "81f392a360058c30a45ecd7101db337b9f6cd15848090842263a4b3ba1d29b84", "fd4849ff41baefbe1f73e05922dbf573b890920fc873fb15e59cbf9817554428" ], "finishedAt": "2026-07-19 04:43:31.710002+00:00", "observedAt": [ "2026-07-19 04:43:17.558769+00:00", "2026-07-19 04:43:17.582668+00:00" ], "parsedItems": 6830, "providerHighWater": "2026-06-22 14:33:55+00:00" }, { "label": "2014", "runId": "dcf80359-f442-44cc-89d1-9efefcb531a4", "outcomes": { "accepted_new": 9002, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 13, "artifacts": [ "8b92c37c95d58faeaefa36d74bc8c457277639e02e201de85cd0e73221fdedac", "4f290ed1398c1480ef58e2014089de32546faa3cb4a7b409734f2856492f1af6" ], "finishedAt": "2026-07-19 04:43:48.175562+00:00", "observedAt": [ "2026-07-19 04:43:37.003817+00:00", "2026-07-19 04:43:37.027669+00:00" ], "parsedItems": 9002, "providerHighWater": "2026-07-14 07:02:51+00:00" }, { "label": "2015", "runId": "a9ddbd56-7a17-4716-8ef7-b98646483872", "outcomes": { "accepted_new": 8779, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 14, "artifacts": [ "5fcbb14446bd35ba87b6c6f72880f726660f0a5044fedfa2186c4beca013769c", "9214a292f25bae089cbcfc42a50de51b104850a52366bb55d08cdcf28fdb339b" ], "finishedAt": "2026-07-19 04:44:02.325539+00:00", "observedAt": [ "2026-07-19 04:43:51.979447+00:00", "2026-07-19 04:43:52.003361+00:00" ], "parsedItems": 8779, "providerHighWater": "2026-07-11 07:02:24+00:00" }, { "label": "2016", "runId": "717f0693-3ac9-4739-a4a8-ae15430c3380", "outcomes": { "accepted_new": 10645, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 15, "artifacts": [ "04e65bfa06b13445b65adb13a2c4fab94c8ead6af91351917630d7676d58650f", "3aa9583dfa9fc850cb874559343d932c583c51a5236f3ac8f4b10639e584ed68" ], "finishedAt": "2026-07-19 04:44:24.299257+00:00", "observedAt": [ "2026-07-19 04:44:10.865579+00:00", "2026-07-19 04:44:10.889473+00:00" ], "parsedItems": 10645, "providerHighWater": "2026-07-15 07:03:51+00:00" }, { "label": "2017", "runId": "4ff3f65c-d469-40c5-9b4a-0d7f0ded80b4", "outcomes": { "accepted_new": 17102, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 16, "artifacts": [ "a651e7f3cdc26a346cc2b9ae1daa02f80c3b062b071c02eef47d470cc1d6e6b9", "189ca5a2a5bf2ee71110274dfec96dfb6967675392815b6c071fd455257b2dd7" ], "finishedAt": "2026-07-19 04:44:54.578260+00:00", "observedAt": [ "2026-07-19 04:44:34.931023+00:00", "2026-07-19 04:44:34.954916+00:00" ], "parsedItems": 17102, "providerHighWater": "2026-07-15 07:03:41+00:00" }, { "label": "2018", "runId": "7407ec31-c42f-4ef3-928f-ceea9cf9938d", "outcomes": { "accepted_new": 17817, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 17, "artifacts": [ "5b7b6fcf341e2fad01038f62141787c22129799327e0d684ee9ac9eb0bd3e11e", "7576fc6123cb86847db2131feff49435d3f7bdb4ab784e01f1b190399a70aa58" ], "finishedAt": "2026-07-19 04:45:24.822625+00:00", "observedAt": [ "2026-07-19 04:45:04.405387+00:00", "2026-07-19 04:45:04.429288+00:00" ], "parsedItems": 17817, "providerHighWater": "2026-07-15 07:03:28+00:00" }, { "label": "2019", "runId": "e4281720-f813-461d-b0b4-15ca560f77d4", "outcomes": { "accepted_new": 17619, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 18, "artifacts": [ "29b60f9c99d54ef77ea53beb8188f89125bee0e6a6a1b2f6fd3f069ec3f9ee1f", "66890d2628cf6c4917d0511be8926cc11f23870171a49cd86cde62ecb35534fc" ], "finishedAt": "2026-07-19 04:46:11.392499+00:00", "observedAt": [ "2026-07-19 04:45:48.343201+00:00", "2026-07-19 04:45:48.367107+00:00" ], "parsedItems": 17619, "providerHighWater": "2026-07-18 07:02:48+00:00" }, { "label": "2020", "runId": "d8383dd8-5628-4d34-8dd2-c330d24a90e6", "outcomes": { "accepted_new": 21060, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 19, "artifacts": [ "76f7f02bcaff0818727f976983dbc4efa1cb39e724ad8a7ff385fb580ce134d3", "e205ea2615df3649b011b7fa85cd6470db08aa4b1a6d5418dd2900e6f55b2def" ], "finishedAt": "2026-07-19 04:46:58.210199+00:00", "observedAt": [ "2026-07-19 04:46:25.604215+00:00", "2026-07-19 04:46:25.628117+00:00" ], "parsedItems": 21060, "providerHighWater": "2026-07-15 07:02:56+00:00" }, { "label": "2021", "runId": "d26009bb-8c9e-4bca-8bbd-4d3cb4e9a49b", "outcomes": { "accepted_new": 23432, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 20, "artifacts": [ "b5b650aef5bfeead5d2b71e43c270cfaa895a527e4fdeebdd1f3a75f25a6414f", "5499535c9d92516ca0c3a8d8914860e1b691c77bfccf69a4f3faed608802974a" ], "finishedAt": "2026-07-19 04:47:58.033686+00:00", "observedAt": [ "2026-07-19 04:47:20.034101+00:00", "2026-07-19 04:47:20.058010+00:00" ], "parsedItems": 23432, "providerHighWater": "2026-07-18 07:02:28+00:00" }, { "label": "2022", "runId": "7a817232-444c-4907-81f2-cba04a6b7833", "outcomes": { "accepted_new": 27521, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 21, "artifacts": [ "567cbc0d8b80575b8fc4a33db38acf661fe0c1adba2c44938c42ffca94df0b10", "28e9c2e44e0f553448d2726a98654c60e2c54909f7242bd47e0e341f6395945b" ], "finishedAt": "2026-07-19 04:48:56.608340+00:00", "observedAt": [ "2026-07-19 04:48:18.056864+00:00", "2026-07-19 04:48:18.080766+00:00" ], "parsedItems": 27521, "providerHighWater": "2026-07-18 07:02:06+00:00" }, { "label": "2023", "runId": "355fc4b5-6350-4c41-bb9d-78f2a11084a2", "outcomes": { "accepted_new": 31215, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 22, "artifacts": [ "3cc63dccf9309c237fe84ce988df3d1b2af8f0925aa7df51f4ceb63cc8a68ac5", "f555ebe2df41df3fec1b1044b1e1e13e4de2e7f05b7cefa91e8c60d49329066d" ], "finishedAt": "2026-07-19 04:49:59.492687+00:00", "observedAt": [ "2026-07-19 04:49:15.598424+00:00", "2026-07-19 04:49:15.622398+00:00" ], "parsedItems": 31215, "providerHighWater": "2026-07-18 07:01:40+00:00" }, { "label": "2024", "runId": "ba1436ef-4531-4201-9955-50c91f83ba04", "outcomes": { "accepted_new": 39179, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 23, "artifacts": [ "a401e60783d6ae8cbbc59b913cd7fe1dbcdf3327929a985ee40187e6611c3d79", "c27bc4b61bc8c8d52028ddf6557c9477f3f6f2b78726a0bbdf9476db89d527be" ], "finishedAt": "2026-07-19 04:50:58.995599+00:00", "observedAt": [ "2026-07-19 04:50:14.555726+00:00", "2026-07-19 04:50:14.579580+00:00" ], "parsedItems": 39179, "providerHighWater": "2026-07-18 07:01:10+00:00" }, { "label": "2025", "runId": "47be9085-d2f6-43c5-b074-6add9eed9e2b", "outcomes": { "accepted_new": 44965, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 24, "artifacts": [ "48254ca28f23c7379debc103d0c5825384ab6704f762418609a0cd8f83d42e4a", "aeecf2d5d04416ec9dbf3ecbb1d0294814024e584f2e5dd0e8c0cbc5f2f84b6d" ], "finishedAt": "2026-07-19 04:52:00.999948+00:00", "observedAt": [ "2026-07-19 04:51:13.509403+00:00", "2026-07-19 04:51:13.533381+00:00" ], "parsedItems": 44965, "providerHighWater": "2026-07-18 07:00:37+00:00" }, { "label": "2026", "runId": "ed14fd76-7891-4fea-abc3-6e4c5326b84c", "outcomes": { "accepted_new": 34056, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 0, "duplicate_content": 0, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 25, "artifacts": [ "09691a42268c10d55990407328773b6a812be9cf46b35a6303b5f7f50f417e78", "f6c7d1295d328e56416cbb5777db8e7e1368d66e8cc7a73e98ccb6095c59f83a" ], "finishedAt": "2026-07-19 04:52:51.607917+00:00", "observedAt": [ "2026-07-19 04:52:19.159757+00:00", "2026-07-19 04:52:19.183727+00:00" ], "parsedItems": 34056, "providerHighWater": "2026-07-18 07:00:09+00:00" }, { "label": "modified", "runId": "29339ce0-1ca6-4414-9dd3-d53012e9db95", "outcomes": { "accepted_new": 77, "rejected_safety": 0, "rejected_schema": 0, "accepted_revision": 30, "duplicate_content": 5493, "ignored_out_of_scope": 0, "accepted_deletion_notice": 0 }, "sequence": 26, "artifacts": [ "9c0a10f656b6e4833070595093197952188f271fcf39f16e2b0d3ca6a9af7535", "b27c0761504c0b081c012aaf317939d594de8a5d022f3621f1a375a53bf620c3" ], "finishedAt": "2026-07-19 04:53:45.552234+00:00", "observedAt": [ "2026-07-19 04:53:43.799796+00:00", "2026-07-19 04:53:43.823710+00:00" ], "parsedItems": 5600, "providerHighWater": "2026-07-19 00:00:11+00:00" } ] } ], "applicabilityLimitations": [ "Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.", "Factor D remains unknown because WC-03 has not converted canonical CPE mappings into generation-bound mapping obligations; canonical identity alone does not score applicability." ], "scorePolicy": "public-priority-v1.0.1" }