Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:fuse:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductFuse (bee34936-a9f6-55e2-b831-7407a8845096)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jboss-fuse/redhat-fuse purl2cpe 2026-06-01 10:12:53.114679
pkg:gitlab/redhat/fuse purl2cpe 2026-06-01 10:12:53.114682

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14900 vulnerable 2026-06-08 05:12:56.389078 Details available
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.
Published: 2020-07-06T18:35:01.000Z
Updated: 2024-08-05T00:26:39.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14860 vulnerable 2026-06-08 05:12:56.287821 Details available
HIGH (7.4)
It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.
Published: 2019-11-08T14:45:52.000Z
Updated: 2024-08-05T00:26:39.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.