Enterprise Software
49,623 CVEs tracked since 1999. In the last 12 months, 10,314, +67% on the 12 before.
Enterprise Software by subsector, Oct 2026 so far
- ITSM & monitoring44529% · 68 vendors
- ERP30520% · 11 vendors
- Collaboration26117% · 34 vendors
- Document management23815% · 26 vendors
- CRM1188% · 11 vendors
- Not yet sub-classified95The tagger has not placed these yet
- 2 smaller subsectors95
- BI & reporting56
- HR & finance39
Month by month
Every monthly snapshot of Enterprise Software. A column is the CVEs published that month.
| Month | CVEs |
|---|---|
| 2021-10 | 369 |
| 2021-11 | 260 |
| 2021-12 | 295 |
| 2022-01 | 402 |
| 2022-02 | 357 |
| 2022-03 | 337 |
| 2022-04 | 356 |
| 2022-05 | 351 |
| 2022-06 | 345 |
| 2022-07 | 350 |
| 2022-08 | 364 |
| 2022-09 | 290 |
| 2022-10 | 397 |
| 2022-11 | 364 |
| 2022-12 | 346 |
| 2023-01 | 249 |
| 2023-02 | 397 |
| 2023-03 | 0 |
| 2023-04 | 407 |
| 2023-05 | 340 |
| 2023-06 | 332 |
| 2023-07 | 361 |
| 2023-08 | 367 |
| 2023-09 | 310 |
| 2023-10 | 458 |
| 2023-11 | 334 |
| 2023-12 | 457 |
| 2024-01 | 372 |
| 2024-02 | 449 |
| 2024-03 | 453 |
| 2024-04 | 381 |
| 2024-05 | 609 |
| 2024-06 | 414 |
| 2024-07 | 434 |
| 2024-08 | 601 |
| 2024-09 | 321 |
| 2024-10 | 340 |
| 2024-11 | 540 |
| 2024-12 | 431 |
| 2025-01 | 433 |
| 2025-02 | 406 |
| 2025-03 | 609 |
| 2025-04 | 581 |
| 2025-05 | 668 |
| 2025-06 | 441 |
| 2025-07 | 517 |
| 2025-08 | 617 |
| 2025-09 | 577 |
| 2025-10 | 691 |
| 2025-11 | 535 |
| 2025-12 | 512 |
| 2026-01 | 494 |
| 2026-02 | 658 |
| 2026-03 | 863 |
| 2026-04 | 676 |
| 2026-05 | 591 |
| 2026-06 | 934 |
| 2026-07 | 1240 |
| 2026-08 | 1591 |
| 2026-09 | 1529 |
| 2026-10 | 1557 |
Vendors
Who shipped the most Enterprise Software CVEs in Oct 2026 so far, with their rank across all vendors.
Weaknesses
The weakness classes behind Enterprise Software CVEs in Oct 2026 so far.
Latest CVEs
The 15 most recently published vulnerabilities in Enterprise Software.
- CVE-2026-91920Undertow: undertow: chunkreader message length permits chunk-size overflow6.5
- CVE-2026-61719WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field8.9
- CVE-2026-61673WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover—
- CVE-2026-61671WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes8.1
- CVE-2026-61654Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key—
- CVE-2026-61576Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key—
- CVE-2026-103093Sandbox Escape via Table Rotation in ServiceNow AI Platform—
- CVE-2026-6877Domain Separation Bypass in ServiceNow AI Platform—
- CVE-2026-103094Cleartext Storage of OAuth Credentials in ServiceNow AI Platform—
- CVE-2026-11587Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.07.2
- CVE-2025-12523Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure6.5
- CVE-2025-13050Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users5.4
- CVE-2026-119145Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload9.9
- CVE-2026-119144Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields8.8
- CVE-2026-112256Logon bypass (trust of attacker-controlled completed-methods list)—
The record
- Busiest month
- Aug 2026, 1,591 CVEs
- Oct 2026 so far
- 1,557 CVEs from 176 vendors
- Deployment
- On-prem, 85%
- Monthly snapshots
- 295 since 1999
Is your business exposed to threats like these?
Discuss a security assessment of your internet-facing systems. Scope, price and timing agreed before testing.
Request an assessment