k
konghq
Security Risk Profile
61
/100
highSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 12, 2020 to present
6
Total CVEs
5
Critical+High
1
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
61/100
high
⚠️ 1 Active Exploits⚡ 1 Zero-Days
Severity Distribution
Critical
1High
4Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. Microsoft Windows 1022
2. Apache Tomcat14
3. alpine/nghttp210
4. alpine/nginx10
5. Microsoft Visual Studio 20228
Recent Vulnerabilities
See more →CVE-2023-44487
CVSS 7.5high
- Rapid Reset HTTP/2 vulnerability
Oct 9, 2023⚠ Exploited⚡ Zero-Day
CVE-2023-40299
CVSS 7.8high
Oct 4, 2023
CVE-2023-2418
CVSS 5.9medium
Konga Login API random values
Apr 29, 2023🔧 No Patch
CVE-2020-36661
CVSS 7.5high
Kong lua-multipart multipart.lua is_header redos
Feb 12, 2023
CVE-2021-27306
CVSS 7.5high
Mar 18, 2021
CVE-2020-11710
CVSS 9.8critical
Apr 12, 2020🔧 No Patch
Monitor konghq in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.