CVE Program partner
Wiz
Wiz, Inc.
CVEs, 365 days17 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Wiz, Inc. |
| Role | CNA |
| Type | Vendor, Researcher |
| Reports to | mitre |
| Scope | Vulnerabilities identified in Wiz products, and vulnerabilities discovered by, or reported to, Wiz that are not in another CNA’s scope. |
| Advisories | https://www.wiz.io/security-advisories |
Latest CVEs · RSS
- CVE-2025-8110 2025-12-10 · CVSS 8.7Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
- CVE-2025-53692 2025-09-21 · CVSS 7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore
- CVE-2025-53690 2025-09-03 · CVSS 9.0Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects
- CVE-2025-53691 2025-09-03 · CVSS 8.8Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This i
- CVE-2025-53693 2025-09-03 · CVSS 9.8Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experien
- CVE-2025-53694 2025-09-03 · CVSS 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This is
- CVE-2024-9145 2024-10-01 · CVSS 7.1Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable