Live from the NIST NVD

One scoreboard for enterprise network security.

Despite the name, this is not a security score or ranking. We gather the public vulnerability record for major networking and security vendors, disclosed CVEs, severity data, and known exploited vulnerabilities, and lay it out plainly so you can read the evidence and reach your own conclusions.

Vendors tracked

CVEs · Identity & Access Management

978

Critical

108

Last sync

Aug 22, 2026

Vendor scoreboard

24 vendors

Every tracked vendor in the selected category, showing its disclosed CVE volume and CVSS severity mix. Sort by any column to explore; the order is yours, not a ranking or score by us.

Vendors ranked by total disclosed CVE volume with severity breakdown
#	Vendor	Total	Critical	High	Medium	Low	Open (estimated, see note)
01	IBM Security Identity1 product families	187	11	61	102	13	107
02	Cisco10 product families	176	12	19	142	3	170
03	Red Hat Keycloak1 product families	171	10	67	82	12	130
04	WSO21 product families	120	15	16	82	7	71
05	Oracle Identity1 product families	89	32	30	25	2	139
06	Micro Focus / NetIQ1 product families	87	5	19	48	15	155
07	BeyondTrust1 product families	24	6	13	4	1	5
08	Ping Identity1 product families	18	1	6	9	2	9
09	RSA Security1 product families	17	0	5	9	3	5
10	CyberArk2 product families	16	4	6	5	1	6
11	ForgeRock1 product families	15	5	4	5	1	7
12	Auth0Sparse coverage1 product families	14	2	7	5	0	3
13	Delinea1 product families	11	1	2	7	1	8
14	Microsoft Identity2 product families	10	0	4	6	0	6
15	SailPoint1 product families	10	3	6	1	0	10
16	OktaSparse coverage1 product families	5	0	3	1	1	0
17	Cisco DuoSparse coverage1 product families	2	0	0	2	0	2
18	Thales SafeNet1 product families	2	0	0	2	0	2
19	Gluu1 product families	2	1	0	1	0	0
20	WALLIX1 product families	2	0	2	0	0	0
21	OneLoginSparse coverage1 product families	0	0	0	0	0	1
22	One Identity (Quest)1 product families	0	0	0	0	0	73
23	Entrust1 product families	0	0	0	0	0	0
24	SecureAuth1 product families	0	0	0	0	0	0

“Open in latest” counts and inferred versions are heuristic estimates derived from CVE data density and will lag actual vendor releases. Confidence badges indicate the strength of each inference. This is a security-research reference, not a vendor advisory feed.

Head-to-head

Identity & Access Management

Comparison pages are generated per vendor pair from a slug — any tracked pair works Suggestions below are scoped to Identity & Access Management.

/<vendor>-vs-<vendor>

IBM Security Identity vs Cisco IBM Security Identity vs Red Hat Keycloak IBM Security Identity vs WSO2

978 CVEs across 24 vendors in Identity & Access Management