NVD - Vendor Comments You are viewing this page in an unauthorized frame window. This is a potential security issue, you are being redirected to https://nvd.nist.gov An official website of the United States government Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites. NVD MENU General Expand or Collapse NVD Dashboard News and Status Updates FAQ Visualizations Legal Disclaimer Vulnerabilities Expand or Collapse Search & Statistics Weakness Types Data Feeds Vendor Comments CVMAP Vulnerability Metrics Expand or Collapse CVSS v4.0 Calculators CVSS v3.x Calculators CVSS v2.0 Calculator Products Expand or Collapse CPE Dictionary CPE Search CPE Statistics SWID Developers Expand or Collapse Start Here Request an API Key Vulnerabilities Products Data Sources Terms of Use Contact NVD Other Sites Expand or Collapse Checklist (NCP) Repository Configurations (CCE) 800-53 Controls SCAP Search Expand or Collapse Vulnerability Search CPE Search Information Technology Laboratory National Vulnerability Database National Vulnerability Database NVD Vulnerabilities Official Vendor Comments NVD provides the software industry an open forum to comment upon the vulnerabilities discovered in their products. Software vendors have the deepest knowledge about their products and thus are uniquely positioned to comment on their vulnerabilities. Organizations can use this service in a variety of ways. For example, they can provide configuration and remediation guidance, clarify vulnerability applicability, provide deeper vulnerability analysis, dispute third party vulnerability information, and explain vulnerability impact. The CVES API returns all comments within the optional vendorComments object. Until late 2023, the complete set of comments is available as an XML feed from the NVD data feed page. They are also enumerated below. We encourage other vulnerability databases and services to incorporate Official Vendor Comments alongside their CVE descriptions. The comments are also available on the respective NVD vulnerability summary pages (e.g., https://nvd.nist.gov/vuln/detail/CVE-2006-4124). Software development organizations can submit official comments by contacting NVD staff ( [emailprotected]). The capability exists both for organizations to manually submit comments and for organizations to log into NVD to issue and modify comments themselves. We recommend the log in capability for organizations that are affected by more than a few CVE vulnerabilities. It is our hope that the software industry will actively participate in this open forum and that the Official Vendor Comments will be propagated throughout the 300+ products and services that use the CVE standard. The total number of vendor comments is 1,486 (updated every 2 hours) Vendor Comment CVEs 8e6 Technologies CVE-2007-2970 abarcar Software CVE-2006-5840 Acunetix Limited CVE-2007-0120 Advanced Search Bar CVE-2007-4250 AirMagnet CVE-2006-5741 CVE-2006-5742 CVE-2006-5746 AlgoSec CVE-2013-5092 CVE-2013-7318 CVE-2014-4164 Allied Telesyn CVE-2006-6184 Apache CVE-1999-1199 CVE-2000-0505 CVE-2000-0913 CVE-2000-1204 CVE-2000-1205 CVE-2000-1206 CVE-2001-0729 CVE-2001-0730 CVE-2001-0731 CVE-2001-0925 CVE-2001-1342 CVE-2002-0061 CVE-2002-0392 CVE-2002-0654 CVE-2002-0661 CVE-2002-0839 CVE-2002-0840 CVE-2002-0843 CVE-2002-1156 CVE-2002-1592 CVE-2002-1593 CVE-2003-0016 CVE-2003-0017 CVE-2003-0020 CVE-2003-0083 CVE-2003-0132 CVE-2003-0134 CVE-2003-0189 CVE-2003-0192 CVE-2003-0245 CVE-2003-0253 CVE-2003-0254 CVE-2003-0460 CVE-2003-0542 CVE-2003-0789 CVE-2003-0987 CVE-2003-0993 CVE-2004-0113 CVE-2004-0174 CVE-2004-0488 CVE-2004-0492 CVE-2004-0493 CVE-2004-0747 CVE-2004-0748 CVE-2004-0751 CVE-2004-0786 CVE-2004-0809 CVE-2004-0811 CVE-2004-0885 CVE-2004-0940 CVE-2004-0942 CVE-2004-1834 CVE-2004-2343 CVE-2005-1268 CVE-2005-2088 CVE-2005-2491 CVE-2005-2700 CVE-2005-2728 CVE-2005-2970 CVE-2005-3352 CVE-2005-3357 CVE-2006-3747 CVE-2006-3918 CVE-2006-5752 CVE-2006-7098 CVE-2007-1862 CVE-2007-1863 CVE-2007-3303 CVE-2007-3304 CVE-2007-3847 CVE-2007-4465 CVE-2007-4724 CVE-2007-5000 CVE-2007-6203 CVE-2007-6388 CVE-2007-6420 CVE-2007-6421 CVE-2007-6422 CVE-2008-0005 CVE-2008-2168 CVE-2008-2364 CVE-2009-2699 Apple CVE-2007-0059 ASPPlayground.NET CVE-2006-4206 Atlassian CVE-2013-3926 Benson Solutions CVE-2006-1372 Brooks Internet Software, Inc. CVE-2008-0766 C-SAM CVE-2007-4239 Caucho Technology CVE-2010-2032 CCH Group CVE-2014-9113 Centrify CVE-2012-6348 Check Point CVE-2009-1227 com_orgchart developer CVE-2010-1878 ComCity LLC CVE-2007-2997 Double-Take CVE-2008-0973 CVE-2008-0974 CVE-2008-0975 CVE-2008-0976 CVE-2008-0977 CVE-2008-0978 CVE-2008-0979 CVE-2008-1661 Drake CMS CVE-2006-5767 CVE-2007-1849 CVE-2007-1850 CVE-2007-2618 EAST Technologies CVE-2002-2067 EPractize Labs Software CVE-2011-5136 Flexera Software CVE-2016-10395 Furukawa Electric CVE-2020-12133 Glen Dimplex Deutschland GmbH CVE-2019-9484 Group Logic CVE-2008-0758 CVE-2008-0759 CVE-2008-0767 INCA Internet CVE-2018-6522 CVE-2018-6523 CVE-2018-6524 CVE-2018-6525 Integration Matters CVE-2017-16789 Intel CVE-2019-0090 Jalios CVE-2019-19033 Kwik-Pay CVE-2006-1050 LANDESK CVE-2012-1195 CVE-2012-1196 CVE-2014-5360 CVE-2014-5361 Lenovo CVE-2008-3894 lepton-cms CVE-2011-3385 Level Platforms CVE-2008-0636 libevt CVE-2018-8754 libfsntfs CVE-2018-11727 CVE-2018-11728 CVE-2018-11729 CVE-2018-11730 CVE-2018-11731 liblnk CVE-2018-12096 CVE-2018-12097 CVE-2018-12098 libpff CVE-2018-11723 libredwg CVE-2018-14443 CVE-2018-14471 CVE-2018-14524 LogMeIn CVE-2008-7053 Mandriva CVE-2006-0512 CVE-2006-1624 CVE-2006-6144 CVE-2006-7204 CVE-2007-0227 CVE-2007-0448 CVE-2007-1565 CVE-2007-2164 CVE-2007-3126 CVE-2007-3508 CVE-2007-3568 CVE-2007-3997 CVE-2007-4229 CVE-2007-4251 CVE-2007-4596 CVE-2007-4652 CVE-2007-4661 CVE-2007-4663 CVE-2007-4887 CVE-2007-4889 CVE-2007-6420 CVE-2008-4936 menalto CVE-2010-4353 Morgan Stanley CVE-2020-13656 OpenLDAP CVE-2009-3767 openldap.org CVE-2015-1545 openwebanalytics CVE-2010-2677 Oracle CVE-2008-3257 Pegasus Imaging Corp. CVE-2007-5320 PNC CVE-2014-6881 Polopoly CVE-2005-4481 Portainer CVE-2021-41874 PunBB CVE-2006-4759 Quantum Corporation CVE-2012-1841 CVE-2012-1842 CVE-2012-1843 CVE-2012-1844 Rave CVE-2006-5621 Razor CVE-2000-0572 Red Hat CVE-1999-0523 CVE-1999-0524 CVE-1999-0997 CVE-1999-1572 CVE-2000-1137 CVE-2000-1199 CVE-2001-0187 CVE-2001-0935 CVE-2001-1507 CVE-2001-1534 CVE-2001-1556 CVE-2002-0004 CVE-2002-0389 CVE-2002-0497 CVE-2002-0510 CVE-2002-0639 CVE-2002-1642 CVE-2002-1648 CVE-2002-1649 CVE-2002-1650 CVE-2002-1850 CVE-2002-1903 CVE-2002-2013 CVE-2002-2043 CVE-2002-2061 CVE-2002-2103 CVE-2002-2196 CVE-2002-2204 CVE-2002-2210 CVE-2003-0131 CVE-2003-0147 CVE-2003-0192 CVE-2003-0367 CVE-2003-0427 CVE-2003-0543 CVE-2003-0544 CVE-2003-0545 CVE-2003-0618 CVE-2003-0682 CVE-2003-0693 CVE-2003-0695 CVE-2003-0857 CVE-2003-0860 CVE-2003-0861 CVE-2003-0863 CVE-2003-0885 CVE-2003-1138 CVE-2003-1307 CVE-2003-1308 CVE-2003-1331 CVE-2003-1557 CVE-2003-1562 CVE-2004-0079 CVE-2004-0112 CVE-2004-0174 CVE-2004-0175 CVE-2004-0230 CVE-2004-0603 CVE-2004-0687 CVE-2004-0688 CVE-2004-0806 CVE-2004-0811 CVE-2004-0829 CVE-2004-0914 CVE-2004-0941 CVE-2004-0967 CVE-2004-0971 CVE-2004-0975 CVE-2004-0976 CVE-2004-0996 CVE-2004-1002 CVE-2004-1020 CVE-2004-1051 CVE-2004-1063 CVE-2004-1064 CVE-2004-1170 CVE-2004-1177 CVE-2004-1185 CVE-2004-1186 CVE-2004-1287 CVE-2004-1296 CVE-2004-1307 CVE-2004-1377 CVE-2004-1392 CVE-2004-1653 CVE-2004-1717 CVE-2004-1808 CVE-2004-1880 CVE-2004-2300 CVE-2004-2320 CVE-2004-2343 CVE-2004-2546 CVE-2004-2654 CVE-2004-2680 CVE-2004-2731 CVE-2004-2760 CVE-2004-2761 CVE-2005-0085 CVE-2005-0109 CVE-2005-0256 CVE-2005-0373 CVE-2005-0468 CVE-2005-0469 CVE-2005-0488 CVE-2005-0602 CVE-2005-0605 CVE-2005-0758 CVE-2005-0953 CVE-2005-0988 CVE-2005-1038 CVE-2005-1111 CVE-2005-1119 CVE-2005-1194 CVE-2005-1228 CVE-2005-1229 CVE-2005-1306 CVE-2005-1344 CVE-2005-1544 CVE-2005-1704 CVE-2005-1705 CVE-2005-1730 CVE-2005-1751 CVE-2005-1753 CVE-2005-1797 CVE-2005-2069 CVE-2005-2096 CVE-2005-2475 CVE-2005-2541 CVE-2005-2547 CVE-2005-2642 CVE-2005-2666 CVE-2005-2693 CVE-2005-2797 CVE-2005-2798 CVE-2005-2929 CVE-2005-2946 CVE-2005-2959 CVE-2005-2968 CVE-2005-2969 CVE-2005-2975 CVE-2005-2976 CVE-2005-2991 CVE-2005-3011 CVE-2005-3054 CVE-2005-3120 CVE-2005-3183 CVE-2005-3186 CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3258 CVE-2005-3319 CVE-2005-3391 CVE-2005-3392 CVE-2005-3582 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628 CVE-2005-3964 CVE-2005-4158 CVE-2005-4268 CVE-2005-4348 CVE-2005-4442 CVE-2005-4636 CVE-2005-4667 CVE-2005-4745 CVE-2005-4746 CVE-2005-4784 CVE-2005-4807 CVE-2005-4808 CVE-2005-4835 CVE-2005-4881 CVE-2006-0043 CVE-2006-0097 CVE-2006-0151 CVE-2006-0225 CVE-2006-0236 CVE-2006-0321 CVE-2006-0405 CVE-2006-0454 CVE-2006-0459 CVE-2006-0553 CVE-2006-0576 CVE-2006-0670 CVE-2006-0730 CVE-2006-0743 CVE-2006-0883 CVE-2006-0903 CVE-2006-1014 CVE-2006-1015 CVE-2006-1017 CVE-2006-1057 CVE-2006-1058 CVE-2006-1095 CVE-2006-1168 CVE-2006-1174 CVE-2006-1251 CVE-2006-1494 CVE-2006-1542 CVE-2006-1549 CVE-2006-1608 CVE-2006-1624 CVE-2006-2050 CVE-2006-2073 CVE-2006-2083 CVE-2006-2193 CVE-2006-2194 CVE-2006-2369 CVE-2006-2414 CVE-2006-2440 CVE-2006-2450 CVE-2006-2502 CVE-2006-2563 CVE-2006-2607 CVE-2006-2656 CVE-2006-2660 CVE-2006-2754 CVE-2006-2789 CVE-2006-2906 CVE-2006-2916 CVE-2006-2937 CVE-2006-2940 CVE-2006-3005 CVE-2006-3011 CVE-2006-3018 CVE-2006-3083 CVE-2006-3093 CVE-2006-3145 CVE-2006-3174 CVE-2006-3334 CVE-2006-3376 CVE-2006-3378 CVE-2006-3459 CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465 CVE-2006-3467 CVE-2006-3469 CVE-2006-3486 CVE-2006-3587 CVE-2006-3588 CVE-2006-3619 CVE-2006-3626 CVE-2006-3672 CVE-2006-3731 CVE-2006-3738 CVE-2006-3742 CVE-2006-3743 CVE-2006-3744 CVE-2006-3747 CVE-2006-3835 CVE-2006-3879 CVE-2006-4031 CVE-2006-4095 CVE-2006-4096 CVE-2006-4124 CVE-2006-4144 CVE-2006-4146 CVE-2006-4181 CVE-2006-4226 CVE-2006-4227 CVE-2006-4262 CVE-2006-4310 CVE-2006-4334 CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 CVE-2006-4338 CVE-2006-4339 CVE-2006-4343 CVE-2006-4433 CVE-2006-4434 CVE-2006-4447 CVE-2006-4481 CVE-2006-4513 CVE-2006-4514 CVE-2006-4572 CVE-2006-4600 CVE-2006-4623 CVE-2006-4624 CVE-2006-4625 CVE-2006-4790 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809 CVE-2006-4810 CVE-2006-4811 CVE-2006-4812 CVE-2006-4814 CVE-2006-4842 CVE-2006-4924 CVE-2006-4925 CVE-2006-4980 CVE-2006-5051 CVE-2006-5052 CVE-2006-5158 CVE-2006-5159 CVE-2006-5160 CVE-2006-5173 CVE-2006-5178 CVE-2006-5214 CVE-2006-5215 CVE-2006-5229 CVE-2006-5297 CVE-2006-5298 CVE-2006-5397 CVE-2006-5456 CVE-2006-5465 CVE-2006-5466 CVE-2006-5467 CVE-2006-5619 CVE-2006-5633 CVE-2006-5649 CVE-2006-5701 CVE-2006-5706 CVE-2006-5749 CVE-2006-5751 CVE-2006-5753 CVE-2006-5757 CVE-2006-5779 CVE-2006-5794 CVE-2006-5823 CVE-2006-5864 CVE-2006-5868 CVE-2006-5870 CVE-2006-5876 CVE-2006-5969 CVE-2006-5974 CVE-2006-5989 CVE-2006-6015 CVE-2006-6027 CVE-2006-6053 CVE-2006-6054 CVE-2006-6056 CVE-2006-6057 CVE-2006-6097 CVE-2006-6101 CVE-2006-6102 CVE-2006-6103 CVE-2006-6105 CVE-2006-6106 CVE-2006-6107 CVE-2006-6142 CVE-2006-6143 CVE-2006-6144 CVE-2006-6169 CVE-2006-6235 CVE-2006-6236 CVE-2006-6297 CVE-2006-6303 CVE-2006-6304 CVE-2006-6305 CVE-2006-6332 CVE-2006-6383 CVE-2006-6385 CVE-2006-6493 CVE-2006-6628 CVE-2006-6660 CVE-2006-6698 CVE-2006-6719 CVE-2006-6772 CVE-2006-6811 CVE-2006-6921 CVE-2006-6939 CVE-2006-7051 CVE-2006-7098 CVE-2006-7108 CVE-2006-7139 CVE-2006-7175 CVE-2006-7177 CVE-2006-7178 CVE-2006-7179 CVE-2006-7180 CVE-2006-7204 CVE-2006-7205 CVE-2006-7221 CVE-2006-7232 CVE-2006-7236 CVE-2007-0003 CVE-2007-0010 CVE-2007-0061 CVE-2007-0062 CVE-2007-0063 CVE-2007-0080 CVE-2007-0086 CVE-2007-0103 CVE-2007-0104 CVE-2007-0157 CVE-2…