libexpat
Security Risk Profile
31
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 5, 2024 to present
7
Total CVEs
0
Critical+High
1
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
4.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
31/100
low
⚠️ 1 Active Exploits
Severity Distribution
Critical
0High
0Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
1
Most Affected Products
1. Libexpat expat5
2. Oracle Enterprise PeopleTools3
3. Oracle Agile Product Lifecycle Management (PLM) Framework2
4. Oracle Communications2
5. Oracle Financial Services2
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q2/1030
unknown
libexpat 2.8.2 fixes 14 vulnerabilities (integer overflow, out-of-bounds write, ..)
6/25/2026🔧 No Patch
CVE-2025-66382
CVSS 5.5medium
expat looking for help with another unfixed non-public denial-of-service vulnerability [CVE-2025-66382]
11/28/2025
https://seclists.org/oss-sec/2025/q3/194
unknown
libexpat 2.7.3 improves fixes to CVE-2024-8176 and CVE-2025-59375
9/24/2025🔧 No Patch
https://seclists.org/oss-sec/2025/q3/170
unknown
libexpat 2.7.2 fixes CVE-2025-59375 (DoS, CWE-770)
9/16/2025🔧 No Patch
https://www.theregister.com/2025/01/23/oracle_patch_linux/
unknown
Oracle emits 603 patches, names one it wants you to worry about soon
1/23/2025⚠ Exploited🔧 No Patch
REDHAT-BUG-2308617
CVSS 4.0medium
8/30/2024🔧 No Patch
REDHAT-BUG-2262877
CVSS 4.0medium
2/5/2024🔧 No Patch
Monitor libexpat in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.