KU
Product
Kura
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Kura to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7649 | 9.8 | Sep 11 | The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured Affected: through 2.0.2 |
| CVE-2026-9561 | 8.2 | Jul 14 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in audit log entries Affected: 5.0.0 before 5.6.2 |
| CVE-2024-3046 | 7.5 | Apr 9 | In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device… Affected: 5.0.0 through 5.4.1 |
| CVE-2019-10244 | 7.5 | Apr 9 | In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part of the device… Affected: through 4.0.0 |
| CVE-2019-10243 | 5.3 | Apr 9 | In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies Affected: through 4.0.0 |
| CVE-2019-10242 | 5.3 | Apr 9 | In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number… Affected: through 4.0.0 |
Showing 6