CWE-1104 · 29 records

Use of Unmaintained Third Party Components

CVEs in this class

29 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2023-7102Weaponized	Remote Code Execution (RCE) Vulnerabilitybarracuda · email security gateway 300 firmware · CWE-1104 pre-auth RCE	Critical9.8	—	44.5%	Dec 24, 2023
40Plan	CVE-2025-12104No exploit	Incorrect Content-Type Headerazure-access · blu-ic2 firmware · CWE-1104 Pre-auth	Critical10.0	—	0.4%	Oct 23, 2025
39Monitor	CVE-2026-16634No exploit	TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99felipe · toml::xs · CWE-1104 Pre-auth	Critical9.8	—	0.8%	Jul 24, 2026
39Monitor	CVE-2026-3031No exploit	Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg librarytokuhirom · image::epeg · CWE-1104 Pre-auth	Critical9.8	—	0.7%	Jul 16, 2026
39Monitor	CVE-2026-66788No exploit	Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker labelred hat · red hat advanced cluster management for kubernetes 2.17 · CWE-1104	Critical9.9	—	0.6%	Aug 20, 2026
37Monitor	CVE-2025-34192No exploit	Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Versionvasion · virtual appliance application · CWE-1104 Pre-auth	Critical9.3	—	0.9%	Sep 19, 2025
37Monitor	CVE-2025-10220No exploit	Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4axxonsoft · axxon one · CWE-1104 pre-auth RCE	Critical9.3	—	0.7%	Sep 10, 2025
37Monitor	CVE-2026-41468No exploit	Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injectionbeghelli · sicuroweb (sicuro24) · CWE-1104 Pre-auth SSTI	Critical9.3	—	0.3%	Apr 22, 2026
35Monitor	CVE-2021-22142No exploit	Kibana Reporting vulnerabilitieselastic · kibana · CWE-1104	High8.8	—	1.0%	Nov 21, 2023
35Monitor	CVE-2022-46871No exploit	An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.mozilla · firefox · CWE-1104 Pre-auth	High8.8	—	0.9%	Dec 22, 2022
35Monitor	CVE-2026-60368No exploit	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).oracle · platform security for java · CWE-1104	High8.8	—	0.5%	Jul 22, 2026
34Monitor	CVE-2024-11999No exploit	CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticaschneider electric · harmony (formerly magelis) hmist6, hmistm6, hmig3u, hmig3x, hmisto7 series with ecostruxure operator terminal expert runtime · CWE-1104	High8.7	—	0.6%	Dec 17, 2024
34Monitor	CVE-2025-3497No exploit	Radiflow iSAP Smart Collector Linux distribution unmaintainedradiflow · isap smart collector · CWE-1104	High8.7	—	0.3%	Jul 9, 2025
34Monitor	CVE-2026-12554No exploit	HP Easy Start for macOS - Security Updatehp inc · hp easy start for macos · CWE-1104 Local privilege escalation	High8.5	—	0.3%	Aug 24, 2026
34Monitor	CVE-2025-20010No exploit	Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User ApplCWE-1104 Local privilege escalation	High8.5	—	0.2%	Nov 11, 2025
33Monitor	CVE-2026-21821No exploit	HCL BigFix SCM Reporting is affected by vulnerabilities in jQueryhclsoftware · bigfix scm reporting · CWE-1104 Pre-auth XSS	High8.3	—	0.2%	May 13, 2026
31Monitor	CVE-2024-35252No exploit	Azure Storage Movement Client Library Denial of Service Vulnerabilitymicrosoft · azure storage data movement library · CWE-1104 Pre-auth Denial of service	High7.5	—	2.4%	Jun 11, 2024
31Monitor	CVE-2023-37524No exploit	HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of servicehcltech · traveler for microsoft outlook · CWE-1104	High7.8	—	0.2%	Jun 26, 2026
31Monitor	CVE-2025-14026No exploit	Vulnerable Python version used in Forcepoint One DLP Clientforcepoint · one data loss prevention · CWE-1104	High7.8	—	0.2%	Jan 6, 2026
30Monitor	CVE-2026-21752No exploit	HCL Hive is affected by a use of vulnerable third-party componentshclsoftware · hcl hive · CWE-1104 Pre-auth	High7.5	—	0.4%	Aug 24, 2026
28Monitor	CVE-2025-36745No exploit	SolarEdge SE3680H contains Linux Kernel vulnerabilitiessolaredge · se3680h firmware · CWE-1104 RCE	High7.0	—	0.2%	Dec 12, 2025
27Monitor	CVE-2026-82935No exploit	Use of End-of-Life components in mH-DEVELOPERf&f filipowski · mh-developer · CWE-1104 pre-auth RCE	Medium6.9	—	0.3%	Sep 28, 2026
26Monitor	CVE-2025-55277No exploit	HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerabilityhcltech · aftermarket cloud · CWE-1104 Pre-auth	Medium6.5	—	0.1%	Mar 26, 2026
21Monitor	GHSA-hrpp-f84w-xhfgNo exploit	Outdated Static Dependency in vue-momentnpm · vue-moment · CWE-1104 Pre-auth Denial of service	Medium5.3	—	—	Sep 4, 2020
19Monitor	CVE-2025-52658No exploit	HCL MyXalytics is affected by the use of vulnerable/outdated versionshcltech · dryice myxalytics · CWE-1104	Medium4.8	—	0.1%	Oct 3, 2025

CVE-2023-7102
60This week
Remote Code Execution (RCE) Vulnerability
CriticalCVSS 9.8WeaponizedEPSS 44%
- pre-auth RCE
barracuda · email security gateway 300 firmwareDec 24, 2023
CVE-2025-12104
40Plan
Incorrect Content-Type Header
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
azure-access · blu-ic2 firmwareOct 23, 2025
CVE-2026-16634
39Monitor
TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
felipe · toml::xsJul 24, 2026
CVE-2026-3031
39Monitor
Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
tokuhirom · image::epegJul 16, 2026
CVE-2026-66788
39Monitor
Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label
CriticalCVSS 9.9No exploitEPSS 0%
red hat · red hat advanced cluster management for kubernetes 2.17Aug 20, 2026
CVE-2025-34192
37Monitor
Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
vasion · virtual appliance applicationSep 19, 2025
CVE-2025-10220
37Monitor
Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
axxonsoft · axxon oneSep 10, 2025
CVE-2026-41468
37Monitor
Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SSTI
beghelli · sicuroweb (sicuro24)Apr 22, 2026
CVE-2021-22142
35Monitor
Kibana Reporting vulnerabilities
HighCVSS 8.8No exploitEPSS 1%
elastic · kibanaNov 21, 2023
CVE-2022-46871
35Monitor
An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxDec 22, 2022
CVE-2026-60368
35Monitor
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).
HighCVSS 8.8No exploitEPSS 0%
oracle · platform security for javaJul 22, 2026
CVE-2024-11999
34Monitor
CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authentica
HighCVSS 8.7No exploitEPSS 0%
schneider electric · harmony (formerly magelis) hmist6, hmistm6, hmig3u, hmig3x, hmisto7 series with ecostruxure operator terminal expert runtimeDec 17, 2024
CVE-2025-3497
34Monitor
Radiflow iSAP Smart Collector Linux distribution unmaintained
HighCVSS 8.7No exploitEPSS 0%
radiflow · isap smart collectorJul 9, 2025
CVE-2026-12554
34Monitor
HP Easy Start for macOS - Security Update
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
hp inc · hp easy start for macosAug 24, 2026
CVE-2025-20010
34Monitor
Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Appl
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
Nov 11, 2025
CVE-2026-21821
33Monitor
HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- XSS
hclsoftware · bigfix scm reportingMay 13, 2026
CVE-2024-35252
31Monitor
Azure Storage Movement Client Library Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
microsoft · azure storage data movement libraryJun 11, 2024
CVE-2023-37524
31Monitor
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service
HighCVSS 7.8No exploitEPSS 0%
hcltech · traveler for microsoft outlookJun 26, 2026
CVE-2025-14026
31Monitor
Vulnerable Python version used in Forcepoint One DLP Client
HighCVSS 7.8No exploitEPSS 0%
forcepoint · one data loss preventionJan 6, 2026
CVE-2026-21752
30Monitor
HCL Hive is affected by a use of vulnerable third-party components
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
hclsoftware · hcl hiveAug 24, 2026
CVE-2025-36745
28Monitor
SolarEdge SE3680H contains Linux Kernel vulnerabilities
HighCVSS 7.0No exploitEPSS 0%
- RCE
solaredge · se3680h firmwareDec 12, 2025
CVE-2026-82935
27Monitor
Use of End-of-Life components in mH-DEVELOPER
MediumCVSS 6.9No exploitEPSS 0%
- pre-auth RCE
f&f filipowski · mh-developerSep 28, 2026
CVE-2025-55277
26Monitor
HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
hcltech · aftermarket cloudMar 26, 2026
GHSA-hrpp-f84w-xhfg
21Monitor
Outdated Static Dependency in vue-moment
MediumCVSS 5.3No exploit
- Pre-auth
- Denial of service
npm · vue-momentSep 4, 2020
CVE-2025-52658
19Monitor
HCL MyXalytics is affected by the use of vulnerable/outdated versions
MediumCVSS 4.8No exploitEPSS 0%
hcltech · dryice myxalyticsOct 3, 2025

All vulnerability classes