TE
Product
Trufusion Enterprise
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 0Low 0
Watch
Add Trufusion Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59793 | 9.9 | Feb 17 | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files Affected: before 7.10.5.0 |
| CVE-2025-27224 | 9.8 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files Affected: through 7.10.4.0 |
| CVE-2025-27222 | 8.6 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files Affected: through 7.10.4.0 |
| CVE-2025-27223 | 7.5 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPortal/getProjectList Affected: through 7.10.4.0 |
| CVE-2025-27225 | 7.5 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users Affected: through 7.10.4.0 |
| CVE-2022-25027 | 7.5 | Jan 12 | The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user's… Affected: before 7.9.5.1 |
| CVE-2022-25026 | 7.5 | Jan 12 | A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP… Affected: before 7.9.5.1 |
| CVE-2025-32355 | 7.3 | Feb 17 | Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections Affected: before 7.10.5.0 |
Showing 8