Live from the NIST NVD

CVE scoreboard for enterprise network security.

Despite the name, this is not a security score or ranking. We gather the public vulnerability record for major networking and security vendors, disclosed CVEs, severity data, and known exploited vulnerabilities, and lay it out plainly so you can read the evidence and reach your own conclusions.

Vendors tracked

CVEs · Identity & Access Management

1,062

Critical

138

Last sync

Nov 4, 2026

Vendor scoreboard

24 vendors

Every tracked vendor in the selected category, showing its disclosed CVE volume and CVSS severity mix. Sort by any column to explore; the order is yours, not a ranking or score by us.

Vendors ranked by total disclosed CVE volume with severity breakdown
#	Vendor	Total	Critical	High	Medium	Low	Open (estimated, see note)
01	IBM Security Identity1 product families	209	16	66	112	15	106
02	Cisco10 product families	198	16	21	158	3	193
03	Red Hat Keycloak1 product families	172	11	67	82	12	131
04	Oracle Identity1 product families	125	51	43	28	3	169
05	WSO21 product families	122	15	17	83	7	72
06	Micro Focus / NetIQ1 product families	87	5	19	48	15	185
07	BeyondTrust1 product families	25	7	13	4	1	6
08	Ping Identity1 product families	18	1	6	9	2	9
09	RSA Security1 product families	17	0	5	9	3	5
10	CyberArk2 product families	16	4	6	5	1	6
11	ForgeRock1 product families	15	5	4	5	1	7
12	Auth0Sparse coverage1 product families	14	2	7	5	0	3
13	Delinea1 product families	11	1	2	7	1	8
14	Microsoft Identity2 product families	10	0	4	6	0	7
15	SailPoint1 product families	10	3	6	1	0	10
16	OktaSparse coverage1 product families	5	0	3	1	1	0
17	Cisco DuoSparse coverage1 product families	2	0	0	2	0	2
18	Thales SafeNet1 product families	2	0	0	2	0	2
19	Gluu1 product families	2	1	0	1	0	0
20	WALLIX1 product families	2	0	2	0	0	0
21	OneLoginSparse coverage1 product families	0	0	0	0	0	1
22	One Identity (Quest)1 product families	0	0	0	0	0	88
23	Entrust1 product families	0	0	0	0	0	0
24	SecureAuth1 product families	0	0	0	0	0	0

“Open in latest” counts and inferred versions are heuristic estimates derived from CVE data density and will lag actual vendor releases. Confidence badges indicate the strength of each inference. This is a security-research reference, not a vendor advisory feed.

Head-to-head

Identity & Access Management

Comparison pages are generated per vendor pair from a slug — any tracked pair works Suggestions below are scoped to Identity & Access Management.

/<vendor>-vs-<vendor>

IBM Security Identity vs Cisco IBM Security Identity vs Red Hat Keycloak IBM Security Identity vs Oracle Identity

1,062 CVEs across 24 vendors in Identity & Access Management