Known vulnerabilities in Fuse - page 3

Software: Fuse
Software CPE: cpe:2.3:a:red_hat:fuse:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 22
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fuse Fuse is affected by 225 known vulnerabilities: 3 critical, 52 high, 121 medium, 49 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
7.12.0 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU76427 - Resource Management Errors
CVE-2023-20883
CWE-399 Medium
No
No
7.12.0 23.05.2023 SB2023052310
SB2023052311
SB2023061548
and 42 more
#VU75562 - Improper input validation
CVE-2023-20861
CWE-20 Medium
No
No
7.12.0 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
7.12.0 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370
CWE-674 Medium
No
No
7.12.0 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108
CWE-835 Medium
No
No
7.12.0 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU71593 - Session Fixation
CVE-2022-36437
CWE-384 High
No
No
7.11.1.P1, 7.12.0 27.01.2023 SB2023012717
SB2023012719
SB2023013117
and 1 more
#VU71175 - Improper Authentication
CVE-2023-22602
CWE-287 Medium
No
No
7.12.0 16.01.2023 SB2023011604
SB2023050803
SB2024030809
and 1 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364
CWE-918 Medium
No
No
7.11.1.P1, 7.12.0 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363
CWE-200 Low
No
No
7.11.1.P1, 7.12.0 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU69644 - Improper input validation
CVE-2022-24723
CWE-20 Medium
No
No
7.11.1 28.11.2022 SB2022112847
SB2022112850
SB2023020130
and 2 more
#VU69302 - Exposed Dangerous Method or Function
CVE-2022-41853
CWE-749 High
Available
No
7.11.1 14.11.2022 SB2022111449
SB2022111450
SB2022111451
and 27 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
7.11.1 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749
CWE-121 Medium
No
No
7.11.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857
CWE-400 Medium
No
No
7.11.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197
CWE-89 High
No
No
7.11.1 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
7.11.1 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980
CWE-94 High
Available
No
7.11.1 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
7.11.1 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331
CWE-79 Low
No
No
7.11.1 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more


Showing elements 41 - 60 out of 225