FedRAMP catalog — authorizations & live CVE exposure

FEDRAMP CATALOG

26 products

Authorized products with live security posture — critical / high CVEs and CISA-KEV hits. Click a row for its status timeline & exposed CVEs.

SORTMost exposed Critical On KEV CVE count Name Vendor

All statuses Authorized · 309 In Process · 95 Ready · 20

IMPACTAll impact Moderate · 324 High · 54 LI-SaaS · 39 Low · 7

AUTHORIZED PRODUCT REGISTRY CMMC domains

PRODUCT	PROVIDER	STATUS	IMPACT	CRIT	HIGH	KEV	CVEs
Azure Commercial Cloud Microsoft	Microsoft	Authorized	High	144	328	391	478
Azure Government (includes Dynamics 365) Microsoft	Microsoft	Authorized	High	144	328	391	478
Government Cloud - Common Controls Oracle	Oracle	Authorized	High	78	34	46	119
Oracle Cloud Infrastructure-Government Cloud Oracle	Oracle	Authorized	High	78	34	46	119
Google Services (Google Cloud Platform Products and underlying Infrastructure) Google	Google	Authorized	High	38	75	75	113
Google Workspace Google	Google	Authorized	High	38	75	75	113
VMware Government Services (VGS) VMware, Inc.	VMware, Inc.	Authorized	High	17	21	29	43
Security Service Edge (Formerly McAfee MVISION) Skyhigh Security	Skyhigh Security	Authorized	High	9	·	·	9
IBM Cloud for Government IBM	IBM	Authorized	High	8	68	8	84
SmartCloud for Government IBM	IBM	Authorized	High	8	68	8	84
Government Community Cloud ServiceNow	ServiceNow	Authorized	High	·	2	2	2
AWS GovCloud Amazon	Amazon	Authorized	High	·	1	·	1
Okta IDaaS Government High Cloud (GHC) Okta	Okta	Authorized	High	·	1	·	1
Accenture Insights Platform (AIP) For Government Accenture Federal Services	Accenture Federal Services	Authorized	High	·	·	·	0
AuthentX Cloud Xtec, Incorporated	Xtec, Incorporated	Authorized	High	·	·	·	0
CORAS Federal CORAS	CORAS	Authorized	High	·	·	·	0
Federal High Impact Virtualized Environment (FedHIVE) Human Resources Technologies, Inc. (HRTec)	Human Resources Technologies, Inc. (HRTec)	Authorized	High	·	·	·	0
GovDataHosting Cloud Platform IT-CNP	IT-CNP	Authorized	High	·	·	·	0
Juvare Federal Cloud Juvare, LLC	Juvare, LLC	Authorized	High	·	·	·	0
Medallia GovCloud Medallia, Inc.	Medallia, Inc.	Authorized	High	·	·	·	0
Salesforce Government Cloud Plus Salesforce	Salesforce	Authorized	High	·	·	·	0
US AI United Solutions	United Solutions	Authorized	High	·	·	·	0
US Axon FedCloud - High Axon	Axon	Authorized	High	·	·	·	0
Workplace.gov Community Cloud High (WC2-H) United States Department of the Treasury	United States Department of the Treasury	Authorized	High	·	·	·	0
Zscaler Internet Access – Government (Secure Web Gateway – vTIC) - High Zscaler, Inc.	Zscaler, Inc.	Authorized	High	·	·	·	0
Zscaler Private Access – Government (Zero Trust Networking – VPN Replacement) Zscaler, Inc.	Zscaler, Inc.	Authorized	High	·	·	·	0