Known vulnerabilities in Fuse - page 5

Software: Fuse
Software CPE: cpe:2.3:a:red_hat:fuse:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 22
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fuse Fuse is affected by 225 known vulnerabilities: 3 critical, 52 high, 121 medium, 49 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63127 - Resource exhaustion
CVE-2021-37136
CWE-400 Medium
No
No
7.10.0 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 37 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
7.8.2, 7.9.1, 7.10.0, 7.10.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more
#VU58177 - Resource exhaustion
CVE-2021-3629
CWE-400 Medium
No
No
7.10.0 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714
CWE-835 Medium
No
No
7.10.0 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56931 - Memory corruption
CVE-2021-30129
CWE-119 Medium
No
No
7.10.0 29.09.2021 SB2021092916
SB2021092917
SB2021111715
and 15 more
#VU56025 - Missing release of memory after effective lifetime
CVE-2021-3690
CWE-401 Medium
No
No
7.10.0 22.08.2021 SB2021082203
SB2022042263
SB2021121542
and 1 more
#VU54909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3536
CWE-79 Medium
No
No
7.10.0 15.07.2021 SB2021071512
SB2021071513
SB2021121542
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
7.10.0 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118
CWE-264 Low
No
No
7.10.0 31.05.2021 SB2021053107
SB2021072775
SB2021072776
and 21 more
#VU52572 - Deserialization of Untrusted Data
CVE-2021-21349
CWE-502 Medium
Available
No
7.10.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52569 - Deserialization of Untrusted Data
CVE-2021-21342
CWE-502 High
No
No
7.10.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52565 - Deserialization of Untrusted Data
CVE-2021-21350
CWE-502 High
No
No
7.10.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52502 - Improper input validation
CVE-2020-27218
CWE-20 Medium
No
No
7.10.0 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163
CWE-200 Medium
No
No
7.10.0 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164
CWE-20 Medium
Available
No
7.10.0 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
7.10.0 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 33 more
#VU50684 - Improper input validation
CVE-2020-13949
CWE-20 Medium
No
No
7.10.0 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 13 more
#VU47516 - Resource Management Errors
CVE-2020-13943
CWE-399 Medium
No
No
7.10.0 12.10.2020 SB2020101213
SB2020110102
SB2020110603
and 6 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415
CWE-611 High
No
No
7.10.0 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU21764 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10744
CWE-94 Medium
No
No
7.10.0 14.10.2019 SB2019072612
SB2021012219
SB2022061803
and 14 more


Showing elements 81 - 100 out of 225