Current status
Authorized · Moderate impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
8 critical
· 9 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| Department of Commerce | Agency | 2022-08-17 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| CRITICAL | CVE-2022-23852 | CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer |
| CRITICAL | CVE-2022-22822 | CVE-2022-22822: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ove |
| CRITICAL | CVE-2022-22823 | CVE-2022-22823: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ov |
| CRITICAL | CVE-2022-22824 | CVE-2022-22824: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an intege |
| CRITICAL | CVE-2021-40438 | CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig |
| CRITICAL | CVE-2021-3711 | CVE-2021-3711: In order to decrypt SM2 encrypted data an application is expected to call the AP |
| CRITICAL | CVE-2020-11656 | CVE-2020-11656: In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, a |
| MEDIUM | CVE-2019-11049 | CVE-2019-11049: In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom h |
| CRITICAL | CVE-2019-19646 | CVE-2019-19646: pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAG |