← Back to vendor leaderboard
Nextcloud GmbH
Vendor
Primary Scores
Original
80
Score breakdown
EXPLAINABILITY (x1)
53
EXPLOITABILITY (x3)
100
REMEDIABILITY (x3)
90
SEVERITY (x2)
48
Excellent
What these primary scores mean
Original?
Uses the scoring scheme devised during Phase I of the NCT SBIR.
Sub-Scores
Default Credentials
100

Score: 99.95821727019498 7180 product(s) evaluated. 3 instance(s) of default credentials found.

Explainability
53

The average Flesch-Kincaid readability score for the descriptions included with the 372 CVE(s) associated with this vendor is 53.08032273066264. This means these descriptions are fairly difficult to read.

Exploitability
100

This vendor has 0 KEV(s) out of 372 CVEs(s).

MFA
99

MFA support was confirmed at https://nextcloud.com/secure/ with 99% classifier confidence.

Physical Tamper
0

25 of the 372 CVE(s) associated with this vendor involve physical access (CVSS attack vector PHYSICAL or a physical-tamper CWE).

Remediability
90

Of the 372 CVE(s) associated with this vendor, 336 CVE(s) include(s) a tag indicating the CVE is remediable.

Severity
48

The average CVSS score of the 372 CVE(s) associated with this vendor is 48.188172043010844.

What these sub-scores mean
Default Credentials?
Based solely on evidence of default credentials and whether users must change them.
Explainability?
Based solely on how clearly vulnerability disclosures are written.
Exploitability?
Based solely on how often known vulnerabilities have been actively exploited.
MFA?
Based solely on evidence of multi-factor authentication in the vendor's products.
Physical Tamper?
Based solely on the proportion of known vulnerabilities involving physical access.
Remediability?
Based solely on how readily vulnerabilities can be patched or mitigated.
Severity?
Based solely on the average severity of known vulnerabilities.