Solution sectors / enterprise-software
Enterprise Software
Enterprise software — ERP, CRM, HR and finance, collaboration and IT service management — runs core business processes and holds sensitive corporate data. This hub tracks CVE trends across it.
itsm-monitoring · 223collaboration-groupware · 108document-mgmt · 44bi-reporting · 23erp · 22crm · 22hr-finance · 4
Cumulative CVEs
44,178
across 292 monthly snapshots
Latest month
542 · proj
-42.0% MoM · +4.8% YoY
Peak month
934
Jun 26
KEV this month
8
100 vendors affected
CVEs per month
Newest period on the right. Click a point to open that monthly report.
Deployment mix
How this sector's software is typically delivered (month in progress) — whether you patch it yourself or a vendor does. AI-assisted vendor classification.
- On-prem77%
- SaaS14%
- Mixed9%
Latest CVEs in this sector
The 15 most recently published vulnerabilities tagged to Enterprise Software.
- CVE-2026-9765CVE-2026-9765 CVE Record7.1
- CVE-2026-11354Participants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter5.3
- CVE-2026-16765CodeAstro Online Classroom loginlinkadmin.php sql injection7.3
- CVE-2026-15968Stored XSS vulnerability in MOVEit Transfer7.1
- CVE-2026-15967MOVEit Transfer refresh-token processing does not enforce updated account restrictions7.5
- CVE-2026-15966Improper CORS handling in MOVEit Transfer7.5
- CVE-2026-10697MFA Bypass in MOVEit Transfer7.5
- CVE-2026-6516Remote Code Execution10.0
- CVE-2026-48539GFI Archiver < 15.13 Stored XSS via MailInsights.aspx5.4
- CVE-2026-48538GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx5.4
- CVE-2026-48537GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx5.4
- CVE-2026-48536GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx5.4
- CVE-2026-48535GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx5.4
- CVE-2026-48534GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx5.4
- CVE-2026-48532GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx5.4
Weakness fingerprint
Top CWE classes in this sector, latest monthly snapshot (month in progress).
Top vendors
Most CVEs in this sector, latest monthly snapshot (month in progress).
| Vendor | CVEs | Crit | KEV |
|---|---|---|---|
| dell | 37 | 3 | · |
| ibm | 36 | 12 | · |
| hclsoftware | 25 | · | · |
| dataease | 20 | · | · |
| grokability | 20 | · | · |
| snipeitapp | 20 | · | · |
| itsourcecode | 15 | · | · |
| sap_se | 15 | 3 | · |
| codeastro | 14 | · | · |
| hcl software | 14 | 1 | · |
Subsectors
Breakdown for the latest monthly snapshot (month in progress).
| Subsector | CVEs | Crit | KEV | Vendors | MoM | Top products |
|---|---|---|---|---|---|---|
| itsm-monitoring | 223 | 25 | 4 | 44 | — | microsoft sharepoint enterprise server 2016 (40) · microsoft sharepoint server 2019 (40) · snipe-it (40) |
| collaboration-groupware | 108 | 11 | 4 | 13 | — | microsoft sharepoint server subscription edition (39) · sharepoint server (39) · office online server (38) |
| document-mgmt | 44 | 6 | · | 9 | — | dataease (20) · experience manager (13) · divvydrive (2) |
| — | 26 | 4 | · | 8 | — | hospital management system (12) · ecommerce website (3) · powerflex manager (3) |
| bi-reporting | 23 | 3 | · | 7 | — | dfxanalytics (9) · metabase (4) · dvp80es3 (3) |
| crm | 22 | · | · | 9 | — | apartment visitor management system (7) · simple online leave management system (4) · pega infinity (2) |
| erp | 22 | 4 | · | 8 | — | apache fineract (3) · sap approuter (2) · @ui5/webcomponents-base (1) |
| hr-finance | 4 | · | · | 2 | — | kivicare – clinic & patient management system (ehr) (3) · proliz's obs (1) |
Sector classification is AI-assisted with human review. How tagging works · Report a misclassification