FedRAMP catalog — authorizations & live CVE exposure

FEDRAMP CATALOG

234 products · SC

Authorized products with live security posture — critical / high CVEs and CISA-KEV hits that help satisfy SC — System and Communications Protection. Click a row for its status timeline & exposed CVEs.

SORTMost exposed Critical On KEV CVE count Name Vendor

All statuses Authorized · 309 In Process · 95 Ready · 20

IMPACTAll impact Moderate · 324 High · 54 LI-SaaS · 39 Low · 7

AUTHORIZED PRODUCT REGISTRY CMMC domains

PRODUCT	PROVIDER	STATUS	IMPACT	CRIT	HIGH	KEV	CVEs
Azure Commercial Cloud Microsoft	Microsoft	Authorized	High	144	328	391	478
Azure Government (includes Dynamics 365) Microsoft	Microsoft	Authorized	High	144	328	391	478
Office 365 Multi-Tenant & Supporting Services Microsoft	Microsoft	Authorized	Moderate	144	328	391	478
Aconex for Defense Oracle	Oracle	Authorized	Moderate	78	34	46	119
Federal Managed Cloud Services Oracle	Oracle	Authorized	Moderate	78	34	46	119
Fusion Cloud Oracle	Oracle	Authorized	Moderate	78	34	46	119
Government Cloud - Common Controls Oracle	Oracle	Authorized	High	78	34	46	119
Oracle Cloud Infrastructure-Government Cloud Oracle	Oracle	Authorized	High	78	34	46	119
Oracle Enterprise Performance Management (EPM) Oracle	Oracle	Authorized	Low	78	34	46	119
Oracle Service Cloud Oracle	Oracle	Authorized	Moderate	78	34	46	119
Oracle Service Cloud (DOD) Oracle	Oracle	Authorized	Moderate	78	34	46	119
Taleo Cloud - U.S. Government Cloud Oracle	Oracle	Authorized	Moderate	78	34	46	119
Google Services (Google Cloud Platform Products and underlying Infrastructure) Google	Google	Authorized	High	38	75	75	113
Google Workspace Google	Google	Authorized	High	38	75	75	113
Adobe Analytics Adobe	Adobe	Authorized	LI-SaaS	23	78	82	101
Adobe Campaign Adobe	Adobe	Authorized	LI-SaaS	23	78	82	101
Adobe Connect Managed Services (ACMS-GC) Adobe	Adobe	Authorized	Moderate	23	78	82	101
Adobe Creative Cloud for Enterprise Adobe	Adobe	Authorized	LI-SaaS	23	78	82	101
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe	Adobe	Authorized	LI-SaaS	23	78	82	101
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe	Adobe	Authorized	Moderate	23	78	82	101
Adobe Learning Manager Adobe	Adobe	Authorized	LI-SaaS	23	78	82	101
Ivanti Neurons for MDM (Formerly MobileIron) Ivanti	Ivanti	Authorized	Moderate	19	24	36	43
Citrix for Government Citrix	Citrix	Authorized	Moderate	18	20	27	38
VMware Government Services (VGS) VMware, Inc.	VMware, Inc.	Authorized	High	17	21	29	43
Workspace ONE VMware, Inc.	VMware, Inc.	Authorized	Moderate	17	21	29	43
Cisco Cloudlock for Government Cisco Systems Inc.	Cisco Systems Inc.	Authorized	Moderate	12	97	101	111
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc.	Cisco Systems Inc.	Authorized	Moderate	12	97	101	111
Webex for Government Cisco Systems Inc.	Cisco Systems Inc.	Authorized	Moderate	12	97	101	111
Splunk Cloud Platform for FedRAMP Moderate Splunk	Splunk	Authorized	Moderate	10	1	1	11
Security Service Edge (Formerly McAfee MVISION) Skyhigh Security	Skyhigh Security	Authorized	High	9	·	·	9
IBM Cloud for Government IBM	IBM	Authorized	High	8	68	8	84
IBM Maximo and TRIRIGA on Cloud for U.S. Federal IBM	IBM	Authorized	Moderate	8	68	8	84
MaaS360 Enterprise Mobility Management IBM	IBM	Authorized	Moderate	8	68	8	84
SmartCloud for Government IBM	IBM	Authorized	High	8	68	8	84
Clarity Broadcom	Broadcom	Authorized	Moderate	8	5	5	16
General Support Systems (GSS) Broadcom	Broadcom	Authorized	Moderate	8	5	5	16
AppDynamics GovAPM AppDynamics (a Cisco company)	AppDynamics (a Cisco company)	Authorized	Moderate	7	89	95	97
Palo Alto Networks Government Cloud Services Palo Alto Networks, Inc.	Palo Alto Networks, Inc.	Authorized	Moderate	5	11	16	16
Kiteworks Federal Cloud Accellion USA, LLC.	Accellion USA, LLC.	Authorized	Moderate	4	·	4	4
Qlik Cloud Government Qlik Technologies Inc.	Qlik Technologies Inc.	Authorized	Moderate	4	·	3	4

◀ PREV PAGE 01 / 06 NEXT ▶