W
WinSCP
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 17, 2002 to present
19
Total CVEs
9
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
33/100
low
Severity Distribution
Critical
7High
2Medium
10Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Input Validation
6
2
Buffer Overflow
5
3
Weak RNG
1
4
Race Condition
1
5
Path Traversal
1
Most Affected Products
1. WinSCP WinSCP65
2. Putty PuTTY34
3. Cisco IOS32
4. alpine/putty18
5. Canonical Ubuntu Linux12
Recent Vulnerabilities
See more →CVE-2024-31497
CVSS 5.9EPSS 0%medium
Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client
Apr 15, 2024
PYSEC-2026-1758
CVSS 5.9medium
Dec 18, 2023🔧 No Patch
GO-2023-2402
CVSS 5.9medium
Dec 18, 2023🔧 No Patch
CVE-2023-48795
CVSS 6.0medium
OpenSSH Terrapin attack (CVE-2023-48795)
Dec 12, 2023
CVE-2021-3331
CVSS 9.8critical
Jan 27, 2021🔧 No Patch
CVE-2020-28864
CVSS 9.8critical
Nov 23, 2020🔧 No Patch
CVE-2019-6110
CVSS 6.8medium
Jan 31, 2019
CVE-2019-6111
CVSS 5.9medium
Jan 15, 2019
CVE-2018-20684
CVSS 7.5high
Jan 10, 2019
CVE-2018-20685
CVSS 5.3medium
Jan 10, 2019
Monitor WinSCP in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.