Product by Red Hat
Red Hat Fuse 7
31 known vulnerabilities in Red Hat Fuse 7 (Red Hat), 3 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2016-4437 | Apache Shiro Code Execution Vulnerability In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2017-12617 | Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 54 other products | 8.1 | |
| Critical | CVE-2017-5645 | Apache Log4j: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-1270 | Spring Framework: Code Injection | 9.8 | |
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2017-7957 | Xstream: security vulnerability | 7.5 | |
| High | CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 | |
| Medium | CVE-2019-0201 | Apache ZooKeeper: security vulnerability | 5.9 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2018-1258 | Pivotal Spring Framework: security vulnerability | 8.8 | |
| High | CVE-2019-10174 | Infinispan: Unsafe Reflection | 7.5 | |
| High | CVE-2019-0204 | Apache Mesos: Code Execution | 7.8 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2021-3690 | Undertow: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2018-1199 | Dell EMC Spring by Pivotal: security vulnerability | 5.3 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Medium | CVE-2019-14900 | Hibernate: SQL Injection | 6.5 | |
| Critical | CVE-2026-28368 | Undertow: undertow: request smuggling via inconsistent header parsing | 9.1 | |
| Critical | CVE-2026-28367 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator | 9.1 | |
| Critical | CVE-2026-28369 | Undertow: undertow: request smuggling via malformed http request headers | 9.1 | |
| Medium | CVE-2016-8653 | Red Hat Fuse: Deserialization of Untrusted Data | 5.3 | |
| High | CVE-2026-41731 | Spring for Apache Kafka: Deserialization of Untrusted Data | 8.1 | |
| High | CVE-2019-14860 | Red Hat Syndesis: Permissive Cross-domain Security Policy with Untrusted Domains | 7.4 | |
| Medium | CVE-2020-10688 | RESTEasy: Cross-site Scripting | 6.1 |