Skip to content
COOEY
VENDOR RISK BOARD
37 vendors · ranked by exposure

Every FedRAMP vendor with a correlated CVE, ranked across the tracked catalog. Select a vendor for its dossier; tiers are relative to the most-exposed vendor.

VENDOR EXPOSURE LEADERBOARD · 37 hall of shame →
#VENDORCVEsPRODUCTSTIER
1 Microsoft 440 4 CRITICAL
2 Cisco Systems Inc. 103 7 MEDIUM
3 Duo Security (A Cisco Company) 103 1 MEDIUM
4 Google 98 2 MEDIUM
5 AppDynamics (a Cisco company) 97 1 MEDIUM
6 Adobe 89 8 MEDIUM
7 Oracle 49 10 MEDIUM
8 Ivanti 41 2 LOW
9 VMware, Inc. 33 2 LOW
10 IBM 30 5 LOW
11 Citrix 25 1 LOW
12 Palo Alto Networks, Inc. 15 2 LOW
13 SAP National Security Services Inc. (SAP NS2) 15 2 LOW
14 Trend Micro Inc. 12 2 LOW
15 Skyhigh Security 9 1 LOW
16 Juniper Networks 8 1 LOW
17 Broadcom 7 4 LOW
18 Red Hat 7 1 LOW
19 Siemens Government Technologies 7 1 LOW
20 BeyondTrust 5 1 LOW
21 NetApp 5 1 LOW
22 Accellion USA, LLC. 4 1 LOW
23 Elastic 4 1 LOW
24 Qlik Technologies Inc. 4 1 LOW
25 BMC Software 2 1 LOW
26 ESRI 2 3 LOW
27 GitHub 2 1 LOW
28 MongoDB 2 1 LOW
29 PTC 2 1 LOW
30 ServiceNow 2 1 LOW
31 Amazon 1 2 LOW
32 MicroFocus 1 1 LOW
33 NICE inContact 1 1 LOW
34 SailPoint Technologies, Inc. 1 2 LOW
35 Somnoware Healthcare Systems 1 1 LOW
36 Splunk 1 2 LOW
37 Tenable Public Sector (TPS) 1 1 LOW
CURRENT DOSSIER full dossier →
Microsoft
CVE total 440 CRITICAL 30-day trend ▲ 10 vs prior 30d Severity mix 124 crit311 high383 KEV
Correlated events · 8 weeks
06-2206-2907-0607-1307-2007-2708-0308-10
Most-exposed products
Azure Commercial Cloud440
Azure Government (includes Dynamics 365)440
Microsoft Office 365 GCC High440
Office 365 Multi-Tenant & Supporting Services440
▤ Products in catalog ⚠ All exposures