basicsecurity.net
Proof, not just disclosure.
Threats / Contributors / Red Hat
Vendor security team contributor

Red Hat

CNA assigner on 30 of 30 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

No vendor advisory domain is cited for this contributor in the corpus — its credit here is as a CNA/finder. Home URL is a stated coverage gap.

30
records cited in
deterministic count
0
finder / reporter credits
CVE.org credits
30
CVE records catalogued (CNA)
assigner
62%
avg modeled exploit prob.
FIRST EPSS, 30/30
13%
ransomware-associated
4 of 30 · CISA flag
01

Known for

— recomputed from this contributor’s own records
SurfacesApplication / other (13), Server / web platform (9), Operating system / kernel (7), Browser (1)
WeaknessAuthorization / access control (8), Memory safety (7), Injection (4), Path traversal / file (2), Authentication (1)
PortfolioLinux (7), Red Hat (6), Apache (4), Exim (3), ImageMagick (3), Rails (2)
02

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out
1Front door
30reach this stage
→
2Keys to the kingdom
29reach this stage
→
3Lateral reach
23reach this stage
→
4Data at risk
6reach this stage
→
5Lights out
1reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 6 of 30 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

03

Recent highlights

— this contributor’s newest known-exploited records
CVE-2022-0492Linux5%KEVCVE-2018-14634Linux15%KEVCVE-2023-0386Linux8%KEVCVE-2016-3714ImageMagick97%KEVCVE-2022-0185Linux25%KEVCVE-2023-4911GNU79%KEV
04

Every record they’re cited in

— all 30, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2017-7494Samba99%RWKEVCVE-2017-12149Red Hat91%RWKEVCVE-2010-0738Red Hat79%RWKEVCVE-2010-1428Red Hat62%RWKEVCVE-2014-0160OpenSSL100%KEVCVE-2013-2251Apache100%KEVCVE-2019-10149Exim100%KEVCVE-2016-3088Apache99%KEVCVE-2016-3714ImageMagick97%KEVCVE-2016-0752Rails96%KEVCVE-2021-4034Red Hat95%KEVCVE-2016-4437Apache93%KEVCVE-2022-0847Linux89%KEVCVE-2023-4911GNU79%KEVCVE-2016-3718ImageMagick77%KEVCVE-2016-3715ImageMagick75%KEVCVE-2018-14667Red Hat74%KEVCVE-2010-4344Exim72%KEVCVE-2006-1547Apache55%KEVCVE-2014-0130Rails54%KEVCVE-2013-2094Linux48%KEVCVE-2022-0185Linux25%KEVCVE-2014-0196Linux22%KEVCVE-2015-5317Jenkins22%KEVCVE-2021-3560Red Hat22%KEVCVE-2010-4345Exim18%KEVCVE-2018-14634Linux15%KEVCVE-2023-0386Linux8%KEVCVE-2022-0492Linux5%KEVCVE-2019-8720WebKitGTK2%KEV
05

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

  • Cited in 30 known-exploited records — the list below; every one links to its public source.
  • Catalogued 30 CVE record(s) as the CNA assigner (from CVE.org).

    • Coverage gaps — stated, not hidden

  • This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.
  • The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.
  • No vendor advisory home domain is cited for this contributor in the corpus.