VULNEX SECURITY ENGINE
AUDITING REALTIME ASSETS & THREAT POSTURE...
Negative Test
Negative Test — High CVSS, Not Relevant
These vulnerabilities have high CVSS scores but are excluded because they do not match this organisation's profile.
Profile:
Excluded High-CVSS Vulnerabilities 10 found
CVE-2023-22515
Privilege escalation vulnerability in Atlassian Confluence Data Center and Se...
EXCLUDED
CVSS 10.0 — Critical KEV Product Not Used
Why Excluded:

CVE-2023-22515 has a CVSS score of 10.0 but was excluded because the organisation does not use confluence_data_center. A high CVSS score alone does not make a vulnerability relevant.

Product: confluence_data_center · Score: 90 Reference ↗
CVE-2021-44228
Log4Shell: Unauthenticated Remote Code Execution via JNDI injection in Apache...
EXCLUDED
CVSS 10.0 — Critical KEV Product Not Used
Why Excluded:

CVE-2021-44228 has a CVSS score of 10.0 but was excluded because the organisation does not use log4j. A high CVSS score alone does not make a vulnerability relevant.

Product: log4j · Score: 90 Reference ↗
CVE-2020-1472
Zerologon: Unauthenticated privilege escalation vulnerability in Microsoft Ne...
EXCLUDED
CVSS 10.0 — Critical KEV Product Not Used
Why Excluded:

CVE-2020-1472 has a CVSS score of 10.0 but was excluded because the organisation does not use netlogon. A high CVSS score alone does not make a vulnerability relevant.

Product: netlogon · Score: 90 Reference ↗
CVE-2023-20198
Unauthenticated privilege escalation in Cisco IOS XE Web UI software
EXCLUDED
CVSS 10.0 — Critical KEV Product Not Used
Why Excluded:

CVE-2023-20198 has a CVSS score of 10.0 but was excluded because the organisation does not use ios_xe. A high CVSS score alone does not make a vulnerability relevant.

Product: ios_xe · Score: 90 Reference ↗
CVE-2023-22527
Unauthenticated RCE in Confluence Data Center and Server template injection
EXCLUDED
CVSS 10.0 — Critical KEV Product Not Used
Why Excluded:

CVE-2023-22527 has a CVSS score of 10.0 but was excluded because the organisation does not use confluence_data_center. A high CVSS score alone does not make a vulnerability relevant.

Product: confluence_data_center · Score: 90 Reference ↗
CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome prior to 117
EXCLUDED
CVSS 9.8 — Critical KEV Product Not Used
Why Excluded:

CVE-2023-4863 has a CVSS score of 9.8 but was excluded because the organisation does not use libwebp. A high CVSS score alone does not make a vulnerability relevant.

Product: libwebp · Score: 89 Reference ↗
CVE-2023-46604
Remote Code Execution vulnerability in Apache ActiveMQ via OpenWire protocol
EXCLUDED
CVSS 9.8 — Critical KEV Product Not Used
Why Excluded:

CVE-2023-46604 has a CVSS score of 9.8 but was excluded because the organisation does not use activemq. A high CVSS score alone does not make a vulnerability relevant.

Product: activemq · Score: 89 Reference ↗
CVE-2023-27997
Heap-based buffer overflow in FortiOS SSL-VPN allowing unauthenticated RCE
EXCLUDED
CVSS 9.8 — Critical KEV Product Not Used
Why Excluded:

CVE-2023-27997 has a CVSS score of 9.8 but was excluded because the organisation does not use fortios. A high CVSS score alone does not make a vulnerability relevant.

Product: fortios · Score: 89 Reference ↗
CVE-2022-22965
Spring4Shell: Remote Code Execution in Spring Framework via Data Binding on J...
EXCLUDED
CVSS 9.8 — Critical KEV Product Not Used
Why Excluded:

CVE-2022-22965 has a CVSS score of 9.8 but was excluded because the organisation does not use spring_framework. A high CVSS score alone does not make a vulnerability relevant.

Product: spring_framework · Score: 89 Reference ↗
CVE-2022-26134
Unauthenticated OGNL injection Remote Code Execution in Atlassian Confluence ...
EXCLUDED
CVSS 9.8 — Critical KEV Product Not Used
Why Excluded:

CVE-2022-26134 has a CVSS score of 9.8 but was excluded because the organisation does not use confluence_server. A high CVSS score alone does not make a vulnerability relevant.

Product: confluence_server · Score: 89 Reference ↗