Known vulnerabilities in Autodesk Infraworks - page 2

Vendor: Autodesk
Software CPE: cpe:2.3:a:autodesk:autodesk_infraworks:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Autodesk Infraworks Autodesk Infraworks is affected by 88 known vulnerabilities: 1 critical, 26 high, 37 medium, 24 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94715 - Double Free
CVE-2024-6197
CWE-415 Medium
No
No
2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 24.07.2024 SB2024072431
SB2024080568
SB20240806402
and 11 more
#VU75516 - Heap-based Buffer Overflow
CVE-2021-4214
CWE-122 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 26.04.2023 SB2023042621
SB2023042635
#VU67414 - Improper Validation of Array Index
CVE-2022-35737
CWE-129 Medium
Available
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU63084 - Improper input validation
CVE-2022-22970
CWE-20 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 23 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Available
Exploited
2021.2 Hotfix 9, 2023.1 Hotfix 1 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU25861 - NULL Pointer Dereference
CVE-2020-9327
CWE-476 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 10.03.2020 SB2020022121
SB2020031502
SB2020110913
and 15 more
#VU24199 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-11813
CWE-835 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 13.01.2020 SB2019050804
SB2019040224
SB2019091812
and 11 more
#VU24197 - Improper input validation
CVE-2018-11214
CWE-20 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 13.01.2020 SB2019091812
SB2019080637
SB2022063028
and 2 more
#VU24196 - Improper input validation
CVE-2018-11213
CWE-20 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 13.01.2020 SB2019091812
SB2019080637
SB2022063028
and 2 more
#VU24065 - Missing release of memory after effective lifetime
CVE-2019-20218
CWE-401 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 07.01.2020 SB2019122301
SB2020072756
SB2020110913
and 13 more
#VU24064 - Resource Management Errors
CVE-2019-19959
CWE-399 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 07.01.2020 SB2019122301
SB2020042838
SB2022041131
and 6 more
#VU23915 - Unrestricted Upload of File with Dangerous Type
CVE-2019-19925
CWE-434 High
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 03.01.2020 SB2019122301
SB2020020601
SB2020020614
and 14 more
#VU23914 - NULL Pointer Dereference
CVE-2019-19923
CWE-476 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 03.01.2020 SB2019122301
SB2020020601
SB2020020614
and 14 more
#VU23793 - Improper input validation
CVE-2019-19926
CWE-20 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 23.12.2019 SB2019122301
SB2020020601
SB2020020614
and 14 more
#VU23790 - Improper input validation
CVE-2019-19603
CWE-20 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 23.12.2019 SB2019122301
SB2022031104
SB2022041131
and 17 more
#VU23789 - Improper input validation
CVE-2019-19317
CWE-20 Medium
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 23.12.2019 SB2019122301
SB2022031104
SB2022041131
and 6 more
#VU18059 - Out-of-bounds read
CVE-2019-9936
CWE-125 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 22.03.2019 SB2019032205
SB2019051006
SB2019081527
and 7 more
#VU17049 - Permissions, Privileges, and Access Controls
CVE-2018-11212
CWE-369 Low
No
No
2021.2 Hotfix 9, 2023.1 Hotfix 1 17.01.2019 SB2019011702
SB2019021208
SB2019031810
and 21 more


Showing elements 21 - 40 out of 88