Drupal

Vendor

Primary Scores

Original

Good

What these primary scores mean

Original?

Uses the scoring scheme devised during Phase I of the NCT SBIR.

Sub-Scores

Default Credentials

100

Score: 99.90310077519379 1032 product(s) evaluated. 1 instance(s) of default credentials found.

Explainability

The average Flesch-Kincaid readability score for the descriptions included with the 863 CVE(s) associated with this vendor is 21.418882882945752. This means these descriptions are very difficult to read.

Exploitability

This vendor has 5 KEV(s) out of 863 CVEs(s).

MFA

100

MFA support was confirmed at https://developer.drupal.org/docs/guides/mfa-overview with 100% classifier confidence.

Physical Tamper

100

0 of the 863 CVE(s) associated with this vendor involve physical access (CVSS attack vector PHYSICAL or a physical-tamper CWE).

Remediability

Of the 863 CVE(s) associated with this vendor, 838 CVE(s) include(s) a tag indicating the CVE is remediable.

Severity

The average CVSS score of the 863 CVE(s) associated with this vendor is 48.86790266512157.

What these sub-scores mean

Default Credentials?

Based solely on evidence of default credentials and whether users must change them.

Explainability?

Based solely on how clearly vulnerability disclosures are written.

Exploitability?

Based solely on how often known vulnerabilities have been actively exploited.

MFA?

Based solely on evidence of multi-factor authentication in the vendor's products.

Physical Tamper?

Based solely on the proportion of known vulnerabilities involving physical access.

Remediability?

Based solely on how readily vulnerabilities can be patched or mitigated.

Severity?

Based solely on the average severity of known vulnerabilities.

Company

Resources

Contact