Known vulnerabilities in Fuse

Software: Fuse
Software CPE: cpe:2.3:a:red_hat:fuse:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 22
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fuse Fuse is affected by 225 known vulnerabilities: 3 critical, 52 high, 121 medium, 49 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243
CWE-918 Medium
Available
No
7.13.0 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU85848 - Resource exhaustion
CVE-2023-6481
CWE-400 Medium
No
No
7.13.0 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733
CWE-200 Medium
Available
No
7.13.0 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378
CWE-502 Medium
No
No
7.13.0 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU85351 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50290
CWE-200 Medium
No
No
7.13.0 14.01.2024 SB2024011424
SB2024031814
SB2024061883
#VU85349 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-46749
CWE-22 Medium
No
No
7.13.0 14.01.2024 SB2024011423
SB2024061883
#VU83581 - Improper input validation
CVE-2023-34055
CWE-20 Medium
No
No
7.13.0 29.11.2023 SB2023112967
SB2024011660
SB2024011661
and 22 more
#VU83534 - Deserialization of Untrusted Data
CVE-2022-41678
CWE-502 Medium
No
No
7.13.0 28.11.2023 SB2023112847
SB2023120142
SB2024031265
and 8 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
7.13.0 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410
CWE-502 Medium
No
No
7.12.1, 7.13.0 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604
CWE-502 Critical
Available
Exploited
7.12.1 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
7.13.0 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
7.12.1 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.12.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
7.12.1, 7.13.0 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80880 - Security Features
CVE-2023-34034
CWE-254 High
No
No
7.12.1 19.09.2023 SB2023091914
SB2023100926
SB20231017104
and 22 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
7.12.1, 7.13.0 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
7.12.1, 7.13.0 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
7.12.1 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU79114 - Resource exhaustion
CVE-2023-3223
CWE-400 Medium
No
No
7.12.1, 7.13.0 08.08.2023 SB2023080810
SB2023080815
SB2023080816
and 12 more


Showing elements 1 - 20 out of 225