← Back to vendor leaderboard
Mattermost, Inc.
Vendor
Primary Scores
Original
82
Score breakdown
EXPLAINABILITY (x1)
41
EXPLOITABILITY (x3)
100
REMEDIABILITY (x3)
100
SEVERITY (x2)
48
Excellent
What these primary scores mean
Original?
Uses the scoring scheme devised during Phase I of the NCT SBIR.
Sub-Scores
Default Credentials
99

Score: 99.31323922167111 2621 product(s) evaluated. 18 instance(s) of default credentials found.

Explainability
41

The average Flesch-Kincaid readability score for the descriptions included with the 665 CVE(s) associated with this vendor is 41.08858649277487. This means these descriptions are difficult to read.

Exploitability
100

This vendor has 0 KEV(s) out of 665 CVEs(s).

MFA
100

MFA support was confirmed at https://docs.mattermost.com/security-guide/security-guide-index with 100% classifier confidence.

Physical Tamper
94

2 of the 665 CVE(s) associated with this vendor involve physical access (CVSS attack vector PHYSICAL or a physical-tamper CWE).

Remediability
100

Of the 665 CVE(s) associated with this vendor, 662 CVE(s) include(s) a tag indicating the CVE is remediable.

Severity
48

The average CVSS score of the 665 CVE(s) associated with this vendor is 47.50676691729311.

What these sub-scores mean
Default Credentials?
Based solely on evidence of default credentials and whether users must change them.
Explainability?
Based solely on how clearly vulnerability disclosures are written.
Exploitability?
Based solely on how often known vulnerabilities have been actively exploited.
MFA?
Based solely on evidence of multi-factor authentication in the vendor's products.
Physical Tamper?
Based solely on the proportion of known vulnerabilities involving physical access.
Remediability?
Based solely on how readily vulnerabilities can be patched or mitigated.
Severity?
Based solely on the average severity of known vulnerabilities.