Known vulnerabilities in Autodesk Infraworks 2022.1 Hotfix 3
Vendor:
Autodesk
Software:
Autodesk Infraworks
Version:
2022.1 Hotfix 3
Software CPE:
cpe:2.3:a:autodesk:autodesk_infraworks:*:*:*:*:*:*:*:*
Website:
https://www.autodesk.com/
Total vulnerabilities:
61
Public exploits:
8
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2026.3
2026.2
2026.1
2026.0
2022.1.10.363
2023.1.5.251
2024.1.4.152
2025.02.86
2021.2 Hotfix 9
2023.1 Hotfix 1
2023.0.2
2023.0.1 Hotfix 1
2023.0.1
2022.1.5 Hotfix 5
2022.1.5
2021.2 Hotfix 7
2020.2 Hotfix 7
2022.1 Hotfix 4
2022.1 Hotfix 3
2022.1 Hotfix 1
2021.2 Hotfix 6
2021.2 Hotfix 5
2021.2 Hotfix 3
2021.2 Hotfix 2
2021.2 Hotfix 1
2020.2 Hotfix 6
2020.2 Hotfix 5
2020.2 Hotfix 3
2020.2 Hotfix 2
2020.2 Hotfix 1
2019.3 Hotfix 5
2020.2 Hotfix 4
2021.2 Hotfix 4
2022.0 Hotfix 3
2022.1 Hotfix 2
2019.3
2020.2
2021.2
2022.1
2022.0
Vulnerabilities (61)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU75519 - Allocation of Resources Without Limits or Throttling CVE-2018-1274 |
CWE-770 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 26.04.2023 |
SB2018041822 SB2023042635 |
||
| #VU75516 - Heap-based Buffer Overflow CVE-2021-4214 |
CWE-122 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 26.04.2023 |
SB2023042621 SB2023042635 |
||
| #VU67414 - Improper Validation of Array Index CVE-2022-35737 |
CWE-129 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 15.09.2022 |
SB2022091537 SB2022092034 SB2022092682 and 72 more |
||
| #VU66153 - Heap-based Buffer Overflow CVE-2022-37434 |
CWE-122 | High | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 07.08.2022 |
SB2022080705 SB2022081833 SB2022081851 and 154 more |
||
| #VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097 |
CWE-311 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 05.07.2022 |
SB2022070509 SB2022070522 SB2022070531 and 112 more |
||
| #VU63976 - Improper input validation CVE-2021-22060 |
CWE-20 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 03.06.2022 |
SB2022060324 SB2022060716 SB2022082436 and 9 more |
||
| #VU63084 - Improper input validation CVE-2022-22970 |
CWE-20 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 12.05.2022 |
SB2022051201 SB2022060620 SB2022062223 and 23 more |
||
| #VU62314 - Security Features CVE-2022-22968 |
CWE-254 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 14.04.2022 |
SB2022041405 SB2022042903 SB2022060324 and 31 more |
||
| #VU61760 - Incorrect Regular Expression CVE-2022-22950 |
CWE-185 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 31.03.2022 |
SB2022033110 SB2022060308 SB2022060324 and 25 more |
||
| #VU61720 - Improper input validation CVE-2021-22096 |
CWE-20 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 29.03.2022 |
SB2021102810 SB2022032929 SB2022032930 and 15 more |
||
| #VU61671 - Memory corruption CVE-2018-25032 |
CWE-119 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 28.03.2022 |
SB2022032844 SB2022032845 SB2022033018 and 192 more |
||
| #VU47481 - Improper input validation CVE-2020-13956 |
CWE-20 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 09.10.2020 |
SB2020100902 SB2020101604 SB2021042104 and 77 more |
||
| #VU24199 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-11813 |
CWE-835 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 13.01.2020 |
SB2019050804 SB2019040224 SB2019091812 and 11 more |
||
| #VU24197 - Improper input validation CVE-2018-11214 |
CWE-20 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 13.01.2020 |
SB2019091812 SB2019080637 SB2022063028 and 2 more |
||
| #VU24196 - Improper input validation CVE-2018-11213 |
CWE-20 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 13.01.2020 |
SB2019091812 SB2019080637 SB2022063028 and 2 more |
||
| #VU24065 - Missing release of memory after effective lifetime CVE-2019-20218 |
CWE-401 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 07.01.2020 |
SB2019122301 SB2020072756 SB2020110913 and 13 more |
||
| #VU23915 - Unrestricted Upload of File with Dangerous Type CVE-2019-19925 |
CWE-434 | High | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 03.01.2020 |
SB2019122301 SB2020020601 SB2020020614 and 14 more |
||
| #VU23914 - NULL Pointer Dereference CVE-2019-19923 |
CWE-476 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 03.01.2020 |
SB2019122301 SB2020020601 SB2020020614 and 14 more |
||
| #VU23789 - Improper input validation CVE-2019-19317 |
CWE-20 | Medium | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 23.12.2019 |
SB2019122301 SB2022031104 SB2022041131 and 6 more |
||
| #VU17049 - Permissions, Privileges, and Access Controls CVE-2018-11212 |
CWE-369 | Low | 2021.2 Hotfix 9, 2023.1 Hotfix 1 | 17.01.2019 |
SB2019011702 SB2019021208 SB2019031810 and 21 more |
Showing elements 1 - 20 out of 61