h2o H2O

Name: h2o H2O
Brand: h2o

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical4high3medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-43848US	medium5.9	2.67% (86th)	Exploit	no fix	2022-02-01	≤ Commits prior to 8c0eca3
CVE-2023-30847US	high8.2	0.90% (60th)	—	no fix	2023-04-27	≤ ≤ 2.3.0-beta2
CVE-2023-50247US	high7.5	0.86% (58th)	—	no fix	2023-12-12	≤ ≤ 2.3.0-beta2
CVE-2024-45403US	high7.5	0.65% (51st)	—	1ed32b23f999acf0c5029f09c8525f93eb1d354c	2024-10-11	16b13eee8ad7895b4fe3fcbcabee53bd52782562, → 1ed32b23f999acf0c5029f09c8525f93eb1d354c
CVE-2026-54340US	—	0.49% (42nd)	—	no fix	2026-07-17	≤ < 9265bdd
CVE-2026-44453US	—	0.49% (42nd)	—	no fix	2026-07-16	≤ < 6b5370d
CVE-2026-55213US	—	0.49% (42nd)	—	no fix	2026-07-10	≤ < edd7a120bfc4af11ac0cbebce2a43cc1f93f9af1
CVE-2024-25622US	medium4.3	0.46% (40th)	—	no fix	2024-10-11	≤ < 123f5e2b65dcdba8f7ef659a00d24bd1249141be
CVE-2024-45397US	high7.5	0.44% (38th)	—	no fix	2024-10-11	≤ < 15ed15a2efb83a77bb4baaa5a119e639c2f6898a
CVE-2026-44452US	—	0.41% (35th)	—	no fix	2026-07-16	≤ < 8dc37cb
CVE-2023-41337US	medium6.7	0.18% (8th)	—	no fix	2023-12-12	≤ ≤ 2.3.0-beta2

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.