CWE-1104: Use of Unmaintained Third Party Components
The product relies on third-party components that are not actively supported or maintained by the original developer or a trusted proxy for the original developer.
A kind of CWE-1357 Reliance on Insufficiently Trustworthy Component.
From the CWE List. © The MITRE Corporation.
Newest
- f&f filipowski mh-developer Use of End-of-Life components in mH-DEVELOPER 6.9 Medium
- adenhq hive HCL Hive is affected by multiple security vulnerabilities. 4.2 Medium
- hp inc easy start for macos HP Easy Start for macOS - Security Update 8.5 High
- hclsoftware hcl hive HCL Hive is affected by a use of vulnerable third-party components 7.5 High
- red hat advanced cluster management for kubernetes 2.16, advanced cluster management for kubernetes 2.17 +1 more Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label 9.9 Critical
- cloudflare https://github.com/cloudflare/pages-action cloudflare/pages-action is deprecated — migration required by September 18th, 2026 8.8 High
- felipe toml::xs TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99 9.8 Critical
- oracle platform security for java Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ... 8.8 High
- hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected by Using Components with Known Vulnerability 2.2 Low
- tokuhirom image::epeg Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library 9.8 Critical
- hcl software traveler for microsoft outlook HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service 7.7 High
- hcl software traveler for microsoft outlook HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability 6.7 Medium
- hclsoftware bigfix scm reporting HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery 8.3 High
- beghelli sicuroweb (sicuro24) Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection 9.3 Critical
- hcl aftermarket dpc, hcltech aftermarket cloud +1 more HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability 2.6 Low
- No product listed Use of unmaintained third party components for some Intel(R) Processor Identification Utility... 8.5 High
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 more Incorrect Content-Type Header 10.0 Critical
- hcl software myxalytics, hcltech dryice myxalytics +1 more HCL MyXalytics is affected by the use of vulnerable/outdated versions 3.5 Low
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 more Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes 7.1 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 more Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version 9.3 Critical
- axxonsoft axxon one, axxonone c-werk +1 more Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 9.3 Critical
- bosch rexroth ag ctrlx os - setup Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to... 7.1 High
- radiflow isap smart collector Radiflow iSAP Smart Collector Linux distribution unmaintained 8.7 High
- mongodb bson::xs BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities 9.8 Critical
- schneider electric harmony (formerly magelis) hmist6, hmistm6, hmig3u, hmig3x, hmisto7 series with ecostruxure operator terminal expert runtime, pfxst6000, pfxstm6000, pfxsp5000, pfxgp4100 series with pro-face blue runtime +1 more CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause... 8.7 High
- sophos intercept x A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device... 8.8 High
- microsoft azure storage, azure storage data movement library +1 more Azure Storage Movement Client Library Denial of Service Vulnerability 7.5 High
- vapor Integer overflow in URI leading to potential host spoofing 6.5 Medium
- barracuda networks inc. esg appliance, barracuda email security gateway 300 firmware, email security gateway 400 firmware +3 more +5 more Remote Code Execution (RCE) Vulnerability 9.8 Critical
- elastic kibana Kibana Reporting vulnerabilities 6.6 Medium
- facebook hhvm HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs... 9.8 Critical
- mozilla firefox, debian linux +1 more An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited... 8.8 High
-
traitobjectcrates.io traitobject is Unmaintained No score -
vue-momentnpm Outdated Static Dependency in vue-moment 5.3 Medium -
typemapcrates.io typemap is Unmaintained No score