Skip to content
Noroxi

Fujitsu records

81 published records for vendor fujitsu.

Researcher profile

Entered KEV
1 · 1.2%
Weaponized
2 · 2.5%
Pre-auth RCE
8
With a fix record
19.8%
Median publish → KEV
3171 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

81 records
  • CVE-2013-2251
    99Now

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,

    CriticalCVSS 9.8KEVWeaponizedEPSS 100%

    apache · archivaJul 19, 2013

  • CVE-2013-2566
    48Plan

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to

    MediumCVSS 5.9WeaponizedEPSS 84%

    oracle · communications application session controllerMar 15, 2013

  • CVE-2021-23840
    45Plan

    Integer overflow in CipherUpdate

    HighCVSS 7.5Proof of conceptEPSS 51%

    openssl · opensslFeb 16, 2021

  • CVE-2016-8610
    42Plan

    A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processi

    HighCVSS 7.5Proof of conceptEPSS 40%

    openssl · opensslNov 13, 2017

  • CVE-2009-0270
    42Plan

    Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execut

    CriticalCVSS 10.0No exploitEPSS 6%

    fujitsu · systemcastwizard liteJan 26, 2009

  • CVE-2018-1000007
    41Plan

    libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties.

    CriticalCVSS 9.8No exploitEPSS 8%

    haxx · curlJan 24, 2018

  • CVE-2008-1040
    41Plan

    Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0

    CriticalCVSS 10.0No exploitEPSS 5%

    fujitsu · interstage application server enterpriseFeb 27, 2008

  • CVE-2013-7105
    41Plan

    Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1

    CriticalCVSS 10.0No exploitEPSS 2%

    fujitsu · interstage application serverDec 14, 2013

  • CVE-2019-6111
    40Plan

    An issue was discovered in OpenSSH 7.9.

    MediumCVSS 5.9Proof of conceptEPSS 58%

    openbsd · opensshJan 31, 2019

  • CVE-2020-29127
    40Plan

    An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25.

    CriticalCVSS 9.8No exploitEPSS 4%

    fujitsu · eternus storage dx200 s4 firmwareNov 30, 2020

  • CVE-2022-31794
    40Plan

    An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04.

    CriticalCVSS 9.8No exploitEPSS 3%

    fujitsu · eternus cs8000 firmwareJun 20, 2022

  • CVE-2022-31795
    40Plan

    An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04.

    CriticalCVSS 9.8No exploitEPSS 3%

    fujitsu · eternus cs8000 firmwareJun 20, 2022

  • CVE-2019-18200
    40Plan

    An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices.

    CriticalCVSS 9.8No exploitEPSS 3%

    fujitsu · lx390 firmwareOct 24, 2019

  • CVE-2022-29516
    40Plan

    The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), I

    CriticalCVSS 9.8No exploitEPSS 2%

    fujitsu · ipcom ex2 nw 1100 firmwareMay 18, 2022

  • CVE-2009-0264
    40Plan

    Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vect

    CriticalCVSS 10.0No exploitEPSS 2%

    fujitsu · systemcastwizard liteJan 26, 2009

  • CVE-2023-4092
    39Monitor

    SQL injection vulnerability in Fujitsu Arconte Áurea

    CriticalCVSS 9.8No exploitEPSS 1%

    fujitsu · arconte aureaSep 19, 2023

  • CVE-2019-9835
    38Monitor

    The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection.

    CriticalCVSS 9.6No exploitEPSS 1%

    fujitsu · lx901 firmwareMar 15, 2019

  • CVE-2015-2808
    36Monitor

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initializatio

    LowCVSS 3.7No exploitEPSS 74%

    oracle · communications application session controllerMar 31, 2015

  • CVE-2023-38555
    35Monitor

    Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacke

    HighCVSS 8.8No exploitEPSS 0%

    fujitsu · si-r 30b firmwareJul 26, 2023

  • CVE-2024-33620
    34Monitor

    Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR.

    HighCVSS 8.6No exploitEPSS 1%

    fsas technologies inc. · fujitsu business application id link manager iiJun 18, 2024

  • CVE-2020-8285
    33Monitor

    curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

    HighCVSS 7.5No exploitEPSS 10%

    haxx · libcurlDec 14, 2020

  • CVE-2018-16156
    32Monitor

    In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messa

    HighCVSS 7.8Proof of conceptEPSS 3%

    fujitsu · paperstream ip \(twain\)May 17, 2019

  • CVE-2023-4094
    32Monitor

    Weak authentication vulnerability in Fujitsu Arconte Áurea

    HighCVSS 8.2No exploitEPSS 0%

    fujitsu · arconte aureaSep 19, 2023

  • CVE-2023-4096
    32Monitor

    Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea

    HighCVSS 8.2No exploitEPSS 0%

    fujitsu · arconte aureaSep 19, 2023

  • CVE-2007-3011
    31Monitor

    The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute

    HighCVSS 7.5Proof of conceptEPSS 4%

    fujitsu · serverviewJul 5, 2007