Known vulnerabilities in Autodesk Infraworks 2020.2 Hotfix 6 - page 3

Vendor: Autodesk
Version: 2020.2 Hotfix 6
Software CPE: cpe:2.3:a:autodesk:autodesk_infraworks:*:*:*:*:*:*:*:*
Total vulnerabilities: 50
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Autodesk Infraworks version 2020.2 Hotfix 6 Autodesk Infraworks 2020.2 Hotfix 6 is affected by 50 vulnerabilities: 1 critical, 8 high, 26 medium, 15 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31159
CWE-22 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 08.03.2023 SB2023030823
SB2023030915
SB2023042635
and 15 more
#VU63976 - Improper input validation
CVE-2021-22060
CWE-20 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62314 - Security Features
CVE-2022-22968
CWE-254 Medium
Public exploit available
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
2020.2 Hotfix 7, 2021.2 Hotfix 7, 2022.1.5 Hotfix 5, 2023.0.1 Hotfix 1 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61760 - Incorrect Regular Expression
CVE-2022-22950
CWE-185 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 31.03.2022 SB2022033110
SB2022060308
SB2022060324
and 25 more
#VU61720 - Improper input validation
CVE-2021-22096
CWE-20 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU56063 - Memory corruption
CVE-2021-3711
CWE-119 High
No
No
2020.2 Hotfix 7, 2021.2 Hotfix 7, 2022.1.5 Hotfix 5, 2023.0.1 Hotfix 1 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 53 more
#VU49739 - Improper input validation
CVE-2020-5421
CWE-20 Medium
Public exploit available
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU47481 - Improper input validation
CVE-2020-13956
CWE-20 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more


Showing elements 41 - 60 out of 50