Live from the NIST NVD

One scoreboard for enterprise network security.

Every tracked vendor, ranked by disclosed CVE volume with its CVSS severity mix, product-category breakdowns and the CVEs still open in the inferred latest software

Vendors tracked

CVEs · Identity & Access Management

1,055

Critical

Last sync

Jul 7, 2026

Vendor scoreboard

16 vendors

Every tracked vendor in the selected category, ranked by disclosed CVE volume with its CVSS severity mix.

Filter vendors

Vendors ranked by total disclosed CVE volume with severity breakdown
#	Vendor	Total	Critical	High	Medium	Low	Open (estimated, see note)
01	Cisco5 product families	717	37	211	467	2	2,330
02	IBM Security Identity1 product families	90	6	33	45	6	108
03	Red Hat Keycloak1 product families	79	4	37	31	7	127
04	WSO21 product families	64	9	10	42	3	69
05	Oracle Identity1 product families	21	7	6	8	0	104
06	BeyondTrust1 product families	19	4	10	4	1	5
07	Ping Identity1 product families	17	1	6	8	2	9
08	Delinea1 product families	11	1	2	7	1	8
09	SailPoint1 product families	9	3	5	1	0	9
10	ForgeRock1 product families	9	5	2	2	0	7
11	CyberArk2 product families	8	2	4	2	0	6
12	OktaSparse coverage1 product families	5	0	3	1	1	0
13	Microsoft Identity2 product families	2	0	1	1	0	6
14	WALLIX1 product families	2	0	2	0	0	0
15	Cisco DuoSparse coverage1 product families	1	0	0	1	0	2
16	Gluu1 product families	1	1	0	0	0	0

“Open in latest” counts and inferred versions are heuristic estimates derived from CVE data density and will lag actual vendor releases — confidence badges indicate the strength of each inference. This is a security-research reference, not a vendor advisory feed.

Head-to-head

Identity & Access Management

Comparison pages are generated per vendor pair from a slug — any tracked pair works Suggestions below are scoped to Identity & Access Management.

/<vendor>-vs-<vendor>

Cisco vs IBM Security Identity Cisco vs Red Hat Keycloak Cisco vs WSO2

1,055 CVEs across 16 vendors in Identity & Access Management