Skip to contentRedhat Fuse vulnerabilities
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +4 more +6 morePotential to access user credentials from the log files when debug logging enabledCVE-2019-10212Fix available4.8 Medium
- apache zookeeper, activemq, drill +7 more +9 moreAccess control bypass in Apache ZooKeeperCVE-2019-0201Fix available5.9 Medium
- apache mesos, redhat fuse +1 moreDocker image code execution with Apache MesosCVE-2019-0204Fix available7.8 High
- [unknown] fuse, redhat jboss fuse, jboss a-mq +2 moreIt was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the...CVE-2016-86535.3 Medium
- apache karaf, redhat jboss a-mq, jboss fuse +2 moreIt was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x,...CVE-2016-86487.2 High
- hawt hawtio, redhat jboss fuse +1 moreInsecure cookie sharing in HawtioCVE-2017-2589Fix available8.7 High
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- red hat undertow, redhat jboss enterprise application platform, jboss fuse +1 more +3 moreIncorrect Authorization in UndertowCVE-2017-12196Fix available4.8 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- vmware spring framework, spring security, dell emc spring by pivotal +3 more +5 moreImproper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-coreCVE-2018-1199Fix available5.3 Medium
- hawt hawtio, redhat jboss fuse +1 moreThe admin terminal in Hawt.io does not require authentication, which allows remote attackers to...CVE-2014-01219.8 Critical
- hawt hawtio, redhat jboss fuse +1 moreCross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote...CVE-2014-01208.8 High
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- xstream, debian linux, redhat fuse +1 more +3 moreDenial of service in XStreamCVE-2017-7957Fix available7.5 High
- apache activemq, redhat jboss a-mq, jboss fuse +2 moreImproper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQCVE-2015-7559Fix available2.7 Low
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- apache shiro, aurora, redhat fuse +1 more +3 moreImproper Access Control in Apache ShiroCVE-2016-4437In KEVPublic exploitFix availableEPSS 93.0%9.8 Critical
- redhat data grid, jboss a-mq, openshift +12 more +14 moreDeserialization of Untrusted Data in Apache commons collectionsCVE-2015-7501Known exploitedPublic exploitFix availableEPSS 85.6%9.8 Critical
- redhat jboss fuseRed Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions...CVE-2014-81756.0 Medium
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http ClientCVE-2013-7398Fix available4.3 Medium
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http ClientCVE-2013-7397Fix available4.3 Medium
- elastic elasticsearch, redhat fuse +1 moreImproper Access Control in ElasticsearchCVE-2015-1427In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- igniterealtime smack api, redhat jboss fuse +1 moreThe Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is...CVE-2014-50756.8 Medium
- redhat jboss overlord run time governance, jboss fuse service works +1 moreJBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to...CVE-2013-64696.5 Medium
- redhat jboss fuse, jboss a-mq +1 moreExposure of Sensitive Information to an Unauthorized Actor in JBoss FuseCVE-2014-0085Fix available2.1 Low
- redhat jboss a-mq, jboss fuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss...CVE-2013-43724.3 Medium
- apache cxf, redhat jboss enterprise application platform, jboss enterprise portal platform +3 more +5 moreInadequate Encryption Strength in Apache CXFCVE-2012-5575Public exploitFix available6.4 Medium