D
Vendor security profile
dropbox
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical1
CISA KEV0
Public exploit0
Patch rate%50
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
1
0
0
0
0
3
0
0
CVE KEV
CVE severity distribution
4toplam CVE
Critical1 (25%)
High1 (25%)
Medium1 (25%)
Low1 (25%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%0
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
9.1
CVE-2026-53424Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
Patch status unknownEPSS %1
7.6
CVE-2026-53425Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses
Patch status unknownEPSS %0
5.3
CVE-2026-28809XML external entity injection in Arekinath Esaml
Patch verifiedEPSS %0
8.2
CVE-2024-52270PDF Document Spoofing in DropBox Sign(HelloSign)
Patch status unknownEPSS %0