What’s Vulnerable › Products

Red Hat Fuse vulnerabilities

29 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Red Hat Fuse version is affected

Exploited Red Hat Fuse vulnerabilities

CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
CVE-2015-1427 — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
CVE-2016-4437 — Apache Shiro Code Execution Vulnerability

Latest Red Hat Fuse vulnerabilities

CVE-2026-41731 — In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization (CVSS 8.1)
CVE-2026-28369 — Undertow: undertow: request smuggling via malformed http request headers (CVSS 9.1)
CVE-2026-28368 — Undertow: undertow: request smuggling via inconsistent header parsing (CVSS 9.1)
CVE-2026-28367 — Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator (CVSS 9.1)
CVE-2025-57849 — Fuse: privilege escalation via excessive /etc/passwd permissions (CVSS 6.4)
CVE-2025-12543 — Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf (CVSS 9.6)
CVE-2025-9784 — Undertow: undertow madeyoureset http/2 ddos vulnerability (CVSS 7.5)
CVE-2024-1635 — Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol (CVSS 7.5)
CVE-2023-1108 — Undertow: infinite loop in sslconduit during close (CVSS 7.5)
CVE-2021-4178 — (CVSS 6.7)
CVE-2021-3690 — (CVSS 7.5)
CVE-2021-3597 — (CVSS 5.9)
CVE-2020-10688 — (CVSS 6.1)
CVE-2020-25689 — (CVSS 6.5)
CVE-2019-14900 — (CVSS 6.5)
CVE-2020-10719 — (CVSS 6.5)
CVE-2019-10174 — (CVSS 8.8)
CVE-2019-14860 — (CVSS 6.5)
CVE-2019-10219 — (CVSS 6.1)
CVE-2019-0201 — (CVSS 5.9)
CVE-2019-0204 — (CVSS 7.8)
CVE-2018-1258 — (CVSS 8.8)
CVE-2018-1270 — (CVSS 9.8)
CVE-2018-1199 — (CVSS 5.3)
CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability (CVSS 8.1) — exploited