redhat jboss fuse

Name: redhat jboss fuse
Brand: redhat

productUS

cpe:2.3:a:redhat:jboss_fuse:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

6critical17high15medium4low

updated 2026-10-27

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	2 versions
CVE-2015-7501US	critical9.8OT critical	85.6% (100th)	Exploit	no fix	2017-11-09	= 6.0.0
CVE-2021-4104US	high7.5	80.6% (100th)	Exploit	no fix	2021-12-14	2 versions
CVE-2019-10172US	high7.5	17.0% (97th)	Exploit	no fix	2019-11-18	= 7.0.0
CVE-2016-1000229US	medium6.1	4.04% (91st)	Exploit	no fix	2019-12-20	= 6.3
CVE-2019-14892US	critical9.8	5.58% (93rd)	—	no fix	2020-03-02	= 7.0.0
CVE-2014-0121US	critical9.8	3.97% (90th)	—	no fix	2017-12-29	= 6.1.0
CVE-2024-7885US	high7.5	2.64% (86th)	—	no fix	2024-08-21	= 7.0.0
CVE-2020-1714US	high8.8	2.60% (85th)	—	no fix	2020-05-13	= 7.0.0
CVE-2020-25644US	high7.5	2.37% (84th)	—	no fix	2020-10-06	= 7.0.0
CVE-2020-14340US	medium5.9	2.21% (83rd)	—	no fix	2021-06-02	2 versions
CVE-2019-14888US	high7.5	2.18% (82nd)	—	no fix	2020-01-23	2 versions
CVE-2013-4372US	medium4.3	2.16% (82nd)	—	no fix	2013-09-30	= 6.0.0
CVE-2017-12196US	medium5.9OT elevated	2.01% (81st)	—	no fix	2018-04-18	= 6.0.0
CVE-2016-8648US	high7.2	1.98% (80th)	—	no fix	2018-08-01	= 6.0.0
CVE-2015-7559US	low2.7OT elevated	1.97% (80th)	—	no fix	2019-08-01	= 6.3
CVE-2016-8653US	medium5.3	1.91% (80th)	—	no fix	2018-08-01	= 6.0.0
CVE-2019-10212US	critical9.8	1.89% (79th)	—	no fix	2019-10-02	7.0.0 → 7.4
CVE-2020-1757US	high8.1	1.62% (76th)	—	no fix	2020-04-21	2 versions
CVE-2020-25689US	medium6.5	1.49% (74th)	—	no fix	2020-11-02	= 7.0.0
CVE-2014-8175US	medium6.0	1.47% (74th)	—	no fix	2015-07-08	≤ 6.1.0
CVE-2020-10714US	high7.5	1.45% (73rd)	—	no fix	2020-09-23	= 7.0.0
CVE-2020-10718US	high7.5	1.44% (73rd)	—	no fix	2020-09-16	= 7.0.0
CVE-2020-27782US	high7.5	1.38% (72nd)	—	no fix	2021-02-23	2 versions
CVE-2021-20218US	high7.4	1.31% (71st)	—	no fix	2021-03-16	= 7.0.0
CVE-2020-14307US	medium6.5	1.20% (68th)	—	no fix	2020-07-24	= 6.0.0
CVE-2020-14297US	medium6.5	1.20% (68th)	—	no fix	2020-07-24	= 6.0.0
CVE-2014-0120US	high8.8	1.16% (67th)	—	no fix	2017-12-29	= 6.1.0
CVE-2019-14887US	critical9.1	1.09% (65th)	—	no fix	2020-03-16	= 7.0.0
CVE-2022-2053US	high7.5	1.09% (65th)	—	no fix	2022-08-05	= 7.0.0
CVE-2020-1718US	high8.8	1.00% (63rd)	—	no fix	2020-05-12	= 7.0.0
CVE-2013-7397US	medium4.3OT elevated	0.99% (62nd)	—	no fix	2015-06-24	≤ 6.1.0
CVE-2017-2589US	critical9.0	0.93% (60th)	—	no fix	2018-07-26	= 6.3
CVE-2014-5075US	medium6.8	0.92% (60th)	—	no fix	2014-10-25	≤ 6.1.0
CVE-2022-2764US	medium4.9	0.90% (59th)	—	no fix	2022-09-01	= 7.0.0
CVE-2021-3642US	medium5.3	0.85% (58th)	—	no fix	2021-08-05	= 7.0.0
CVE-2013-7398US	medium4.3OT elevated	0.83% (57th)	—	no fix	2015-06-24	≤ 6.1.0
CVE-2020-1717US	low2.7	0.77% (55th)	—	no fix	2021-02-11	= 7.0.0
CVE-2019-14820US	medium4.3	0.72% (54th)	—	no fix	2020-01-08	= 7.0.0
CVE-2022-4492US	high7.5	0.60% (48th)	—	no fix	2023-02-23	= 7.0.0
CVE-2014-0085US	low2.1	0.38% (32nd)	—	no fix	2014-04-17	= 6.0.0
CVE-2020-10734US	low3.3	0.21% (11th)	—	no fix	2021-02-11	= 7.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-502Deserialization of Untrusted Data5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan