Cyber Security Services vulnerabilities (CVEs)

6 CVEs matched to Cyber Security Services by name in NVD, none on CISA's Known Exploited list.

Back to the Cyber Security Services profile · Alternatives to Cyber Security Services · CVE RSS feed

Exploitation riskElevated risk

6 of 6 CVEs assessed

confirmed exploited

EPSS ≥ 10%

17%

highest single CVE

Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.

CVE-2023-6675 ↗EPSS 0.6%LEV ≥17%Elevated risk
Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. Thi…
CVE-2023-6673 ↗EPSS 0.3%LEV ≥10%Elevated risk
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Ref…
CVE-2023-6672 ↗EPSS 0.3%LEV ≥9.3%Low risk
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Sto…
CVE-2023-6676 ↗EPSS 0.3%LEV ≥9.2%Low risk
Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberM…
CVE-2024-7107 ↗EPSS 0.3%LEV ≥7.0%Low risk
Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Lo…

Recent changes

last 90 days

CVE-2023-6673 is now estimated at a 10% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-06 · NVD ↗
CVE-2023-6675 is now estimated at a 17% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗

CVE severity over time

CVEs by year and severity

Count of matched CVEs by the year NVD published them.
Year	Critical	High	Medium	Low	Unscored	Total
2024	2	2	2	0	0	6

Highest EPSS scores

EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.

CVE	EPSS	Percentile
CVE-2023-6675	0.6%	47%
CVE-2023-6673	0.3%	25%
CVE-2023-6672	0.3%	20%
CVE-2023-6676	0.3%	20%
CVE-2024-7107	0.3%	20%
CVE-2024-7108	0.3%	19%

Known CVEs (6)

RSS ⇢

CVE-2024-7108 ↗CRITICAL 9.82024
Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CyberMath: before CYBM.240…
CVE-2024-7107 ↗HIGH 7.52024
Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: …
↗

How this is counted

CVEs come from the US National Vulnerability Database (NVD) and are matched to Cyber Security Services by vendor name. A name match can include CVEs that concern a similarly named product, and can miss ones filed under another name. The count reflects how widely a vendor's software is deployed and examined as much as anything else, so it is not a measure of how secure the vendor is and should not be used to rank vendors. Latest CVE added here: 2026-08-31.
Known-exploited status comes from the CISA Known Exploited Vulnerabilities (KEV) catalog. Last checked: 2026-10-21.
Exploit probability (EPSS) comes from FIRST. Latest score date: 2026-10-20.