O
Vendor security profile
OW2
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
9
CVE KEV
CVE severity distribution
9toplam CVE
Medium9 (100%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.8
CVE-2026-110591
OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer
O
Patch verified
6.8
CVE-2026-110270
OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter
O
Patch verified
6.8
CVE-2026-110263
OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader
O
Patch verified
4.8
CVE-2026-110262
OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter
O
Patch verified
6.8
CVE-2026-110261
OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES
O
Patch verified
6.8
CVE-2026-110260
OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers
O
Patch verified
6.8
CVE-2026-110259
OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()
O
Patch verified
6.8
CVE-2026-110258
OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions
O
Patch verified
6.8
CVE-2026-110257
OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute
O
Patch verified