Known vulnerabilities in Autodesk Infraworks - page 3

Vendor: Autodesk
Software: Autodesk Infraworks
Software CPE: cpe:2.3:a:autodesk:autodesk_infraworks:*:*:*:*:*:*:*:*
Website: https://www.autodesk.com/
Total vulnerabilities: 88
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Autodesk Infraworks Autodesk Infraworks is affected by 88 known vulnerabilities: 1 critical, 26 high, 37 medium, 24 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75519 - Allocation of Resources Without Limits or Throttling
CVE-2018-1274		 CWE-770 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 26.04.2023 SB2018041822
SB2023042635
#VU72076 - Incorrect Authorization
CVE-2020-7692		 CWE-863 High
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 08.02.2023 SB2020070955
SB2023020889
SB2023022307
and 9 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU64524 - Improper Neutralization of Special Elements used in an Expression Language Statement
CVE-2022-22980		 CWE-917 High
Available
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 21.06.2022 SB2022062101
SB2022112938
SB2023042635
and 2 more
#VU64471 - Improper Verification of Cryptographic Signature
CVE-2021-22573		 CWE-347 Low
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 17.06.2022 SB2022061720
SB2022061804
SB2022062732
and 14 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 37 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 50 more
#VU60986 - Improper input validation
CVE-2020-28491		 CWE-20 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 44 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 27 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 43 more
#VU28773 - Use After Free
CVE-2020-13871		 CWE-416 High
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 07.06.2020 SB2020060705
SB2020072756
SB2020102002
and 8 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 37 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 17 more
#VU24066 - Resource Management Errors
CVE-2019-19924		 CWE-399 Low
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 07.01.2020 SB2019122301
SB2020042838
SB2022031104
and 7 more
#VU23794 - Untrusted Pointer Dereference
CVE-2019-19880		 CWE-822 High
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 23.12.2019 SB2019122301
SB2020020601
SB2020020614
and 13 more
#VU23189 - Improper input validation
CVE-2019-19242		 CWE-20 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 02.12.2019 SB2019120211
SB2019120212
SB2019121736
and 4 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 31 more
#VU18060 - NULL Pointer Dereference
CVE-2019-9937		 CWE-476 Medium
No
No
 2021.2 Hotfix 9, 2023.1 Hotfix 1 22.03.2019 SB2019032205
SB2019051006
SB2019081527
and 7 more
#VU11918 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1273		 CWE-113 High
Available
Exploited
 2021.2 Hotfix 9, 2023.1 Hotfix 1 18.04.2018 SB2018041815
SB2022072013
SB2023011758
and 2 more


Showing elements 41 - 60 out of 88