Fujitsu vulnerabilities1 known to be exploited.
Fujitsu has 78 published vulnerabilities across 319 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is M10-4, with 13. If you run Fujitsu software, patch the exploited flaws first.
The most recent Fujitsu flaw added to the known-exploited list is CVE-2013-2251, on 25 March 2022. We keep watching the known-exploited list.
Which Fujitsu products have the most vulnerabilities?
M10-4 leads with 13 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Fujitsu vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Apache Struts Improper Input Validation Vulnerability
Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.
Which Fujitsu flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
- 84%CVE-2013-2566Medium
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in...
- 74%CVE-2015-2808Medium
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct...
- 58%CVE-2019-6111Medium
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client.
- 51%CVE-2021-23840High
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.
- 40%CVE-2016-8610High
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake.
- 9.8%CVE-2020-8285High
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
- 8.6%CVE-2018-3693Medium
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and...
- 6.6%CVE-2018-1000007Critical
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties.
- 5.5%CVE-2009-0270Critical
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet.
All Fujitsu products we track.
94 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- M10-1 Firmwarem10-1_firmware13 vulnerabilities8 versions
- M10-4 Firmwarem10-4_firmware13 vulnerabilities8 versions
- M10-4s Firmwarem10-4s_firmware13 vulnerabilities8 versions
- M12-1 Firmwarem12-1_firmware13 vulnerabilities7 versions
- M12-2 Firmwarem12-2_firmware13 vulnerabilities7 versions
- M12-2s Firmwarem12-2s_firmware13 vulnerabilities7 versions
- Interstage Application Serverinterstage_application_server7 vulnerabilities34 versions
- Arconte Aureaarconte_aurea5 vulnerabilities1 version
- Serverviewserverview4 vulnerabilities34 versions
- E-Parese-pares3 vulnerabilities7 versions
- Interstage Application Server Enterpriseinterstage_application_server_enterprise3 vulnerabilities14 versions
- Interstage Application Server Standard Jinterstage_application_server_standard_j3 vulnerabilities8 versions
- Interstage Studiointerstage_studio3 vulnerabilities14 versions
- Lx390lx3903 vulnerabilities1 version
- Sparc Enterprise M3000 Firmwaresparc_enterprise_m3000_firmware3 vulnerabilities2 versions
- Sparc Enterprise M4000 Firmwaresparc_enterprise_m4000_firmware3 vulnerabilities2 versions
- Sparc Enterprise M5000 Firmwaresparc_enterprise_m5000_firmware3 vulnerabilities2 versions
- Sparc Enterprise M8000 Firmwaresparc_enterprise_m8000_firmware3 vulnerabilities2 versions
- Sparc Enterprise M9000 Firmwaresparc_enterprise_m9000_firmware3 vulnerabilities2 versions
- Systemcastwizard Litesystemcastwizard_lite3 vulnerabilities6 versions
- Eternus Cs8000 Firmwareeternus_cs8000_firmware2 vulnerabilities1 version
- Interstage Application Server Plusinterstage_application_server_plus2 vulnerabilities6 versions
- Interstage Apworksinterstage_apworks2 vulnerabilities3 versions
- Interstage Apworks Enterpriseinterstage_apworks_enterprise2 vulnerabilities1 version
This directory lists the 94 Fujitsu products with at least one tracked version, of 319 in our catalogue.
Running Fujitsu? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.
- Matched to
- Fujitsu on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 78 published vulnerabilities across 319 products and 396 versions from Fujitsu. The most recent Fujitsu flaw added to the known-exploited list is CVE-2013-2251, on 25 March 2022.
1 Fujitsu vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2013-2251. The full list is on this page.
M10-4, with 13 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Fujitsu products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.