Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

marvell

About This Vendor

marvell is a technology vendor producing software and infrastructure products. As a software provider, marvell's broad product portfolio across multiple domains—including operating systems, cloud infrastructure, enterprise applications, databases, networking, and security tools—creates a large attack surface. Additionally, long support cycles, widespread deployment, and continuous feature development contribute to the accumulation of discovered vulnerabilities over time. Major vendors typically report higher CVE counts not necessarily due to inferior security, but because of greater exposure to security research, responsible disclosure practices, and the sheer complexity of maintaining multiple product lines and legacy systems. Regular security assessments and patching of marvell's products are critical for organizations running their software in production environments.

Vulnerability Trends for This Vendor

SecUtils has indexed 40 known vulnerabilities from marvell. This includes 9 critical-severity issues and 26 high-severity issues that represent significant risk. These vulnerabilities affect 63 distinct products across marvell's portfolio, demonstrating the breadth of the vendor's product ecosystem and the importance of comprehensive patch management strategies. Disclosure dates span from 2008 through 2025, indicating decades of continuous security attention and research. Organizations deploying marvell products should maintain active vulnerability monitoring, prioritize critical patches, and implement compensating controls where patches cannot be applied immediately.

ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2008-1144 2008-09-05 2026-04-23 - 6.3 Unknown
CVE-2008-1197 2008-09-05 2026-04-23 - 6.3 Unknown
CVE-2008-4441 2008-10-14 2026-04-23 - 7.1 Likely
CVE-2008-4594 2008-10-17 2026-04-23 - 10.0 Likely
CVE-2007-5475 2009-11-12 2026-04-23 - 6.8 Likely
CVE-2015-5738 2016-07-26 2026-05-06 7.5 5.0 Likely
CVE-2019-6496 2019-01-20 2024-11-21 8.8 8.3 Unknown
CVE-2019-10636 2019-06-04 2024-11-21 4.6 4.9 Unknown
CVE-2019-10637 2019-06-05 2024-11-21 4.6 2.1 Unknown
CVE-2019-13581 2019-11-15 2024-11-21 9.8 7.5 Likely
CVE-2019-13582 2019-11-15 2024-11-21 9.8 7.5 Likely
CVE-2020-15639 2020-08-25 2024-11-21 9.8 10.0 Likely
CVE-2020-15640 2020-08-25 2024-11-21 7.5 5.0 Likely
CVE-2020-15641 2020-08-25 2024-11-21 7.5 5.0 Likely
CVE-2020-15642 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-15643 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-15644 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-15645 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-17387 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-17388 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-17389 2020-08-25 2024-11-21 8.8 9.0 Likely
CVE-2020-5803 2020-12-18 2024-11-21 8.1 8.5 Likely
CVE-2020-5804 2021-01-08 2024-11-21 8.1 8.5 Likely
CVE-2020-5805 2021-01-08 2024-11-21 8.8 9.0 Likely
CVE-2025-6793 2025-07-07 2025-07-14 9.4 - -
CVE-2025-6794 2025-07-07 2025-07-14 9.8 - -
CVE-2025-6795 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6796 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6797 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6798 2025-07-07 2025-07-14 9.1 - -
CVE-2025-6799 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6800 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6801 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6802 2025-07-07 2025-07-14 9.8 - -
CVE-2025-6803 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6804 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6805 2025-07-07 2025-07-14 9.1 - -
CVE-2025-6806 2025-07-07 2025-07-14 7.5 - -
CVE-2025-6807 2025-07-07 2025-07-14 7.5 - -
CVE-2025-8426 2025-07-31 2025-08-06 9.4 - -

How SecUtils Normalizes Vendor Data

SecUtils aggregates National Vulnerability Database (NVD) and MITRE records for marvell by normalizing vendor identifiers across diverse data sources, mapping vendor names to their associated product lines, and collecting all known vulnerabilities under a unified vendor context. For every CVE associated with marvell's products, we extract and structure Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) categories, CVSS severity metrics, and reference links to enable rapid vulnerability identification and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and vendor vulnerability tracking.