KU
Product
Kura
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Kura to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9561 | 8.2 | Jul 14 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in audit log entries Affected: 5.0.0 before 5.6.2 |
| CVE-2024-3046 | 7.5 | Apr 9 | In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device… Affected: 5.0.0 through 5.4.1 |
| CVE-2019-10244 | 7.5 | Apr 9 | In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part of the device… Affected: through 4.0.0 |
Showing 3
