FU
Product
Fuse
by Redhat · last CVE Jun 9, 2026
On CISA KEVExploited in the wild
29
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 10Medium 11Low 0
Watch

Add Fuse to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4437
In wildKEV
9.8
93%
Jun 7
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access…
Affected: 1.0
CVE-2015-1427
In wildKEV
9.8
100%
Feb 17
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell…
Affected: 1.0.0
Showing 2