Live from the NIST NVD

One scoreboard for enterprise network security.

Despite the name, this is not a security score or ranking. We gather the public vulnerability record for major networking and security vendors, disclosed CVEs, severity data, and known exploited vulnerabilities, and lay it out plainly so you can read the evidence and reach your own conclusions.

Vendors tracked

CVEs · Identity & Access Management

526

Critical

Last sync

Aug 22, 2026

Vendor scoreboard

24 vendors

Every tracked vendor in the selected category, showing its disclosed CVE volume and CVSS severity mix. Sort by any column to explore; the order is yours, not a ranking or score by us.

Vendors ranked by total disclosed CVE volume with severity breakdown
#	Vendor	Total	Critical	High	Medium	Low	Open (estimated, see note)
01	Cisco10 product families	112	11	10	89	2	170
02	IBM Security Identity1 product families	87	6	35	41	5	107
03	WSO21 product families	82	12	11	52	7	71
04	Red Hat Keycloak1 product families	81	4	38	32	7	130
05	Oracle Identity1 product families	56	25	22	9	0	139
06	BeyondTrust1 product families	23	6	12	4	1	5
07	Ping Identity1 product families	17	1	6	8	2	9
08	Micro Focus / NetIQ1 product families	16	0	4	11	1	155
09	Delinea1 product families	11	1	2	7	1	8
10	SailPoint1 product families	10	3	6	1	0	10
11	CyberArk2 product families	8	2	4	2	0	6
12	ForgeRock1 product families	8	4	2	2	0	7
13	OktaSparse coverage1 product families	5	0	3	1	1	0
14	Auth0Sparse coverage1 product families	4	0	1	3	0	3
15	WALLIX1 product families	2	0	2	0	0	0
16	Microsoft Identity2 product families	2	0	1	1	0	6
17	Cisco DuoSparse coverage1 product families	1	0	0	1	0	2
18	Gluu1 product families	1	1	0	0	0	0
19	RSA Security1 product families	0	0	0	0	0	5
20	One Identity (Quest)1 product families	0	0	0	0	0	73
21	Thales SafeNet1 product families	0	0	0	0	0	2
22	SecureAuth1 product families	0	0	0	0	0	0
23	OneLoginSparse coverage1 product families	0	0	0	0	0	1
24	Entrust1 product families	0	0	0	0	0	0

“Open in latest” counts and inferred versions are heuristic estimates derived from CVE data density and will lag actual vendor releases. Confidence badges indicate the strength of each inference. This is a security-research reference, not a vendor advisory feed.

Head-to-head

Identity & Access Management

Comparison pages are generated per vendor pair from a slug — any tracked pair works Suggestions below are scoped to Identity & Access Management.

/<vendor>-vs-<vendor>

Cisco vs IBM Security Identity Cisco vs WSO2 Cisco vs Red Hat Keycloak

526 CVEs across 24 vendors in Identity & Access Management