FU
Vendor
Fujitsu
385
CVEs
1
On KEV
0
New 30D
Products
IB9.8
Interstage Business Process Manager Analytics
Fujitsu
1 CVEs1 on KEV0 new
MF9.8
M10-1 Firmware
Fujitsu
13 CVEs0 on KEV0 new
MF9.8
M10-4 Firmware
Fujitsu
13 CVEs0 on KEV0 new
MF9.8
M10-4s Firmware
Fujitsu
13 CVEs0 on KEV0 new
MF9.8
M12-1 Firmware
Fujitsu
12 CVEs0 on KEV0 new
MF9.8
M12-2 Firmware
Fujitsu
12 CVEs0 on KEV0 new
MF9.8
M12-2s Firmware
Fujitsu
12 CVEs0 on KEV0 new
IA5.9
Interstage Application Server
Fujitsu
7 CVEs0 on KEV0 new
AA9.8
Arconte Aurea
Fujitsu
5 CVEs0 on KEV0 new
SE–
Serverview
Fujitsu
4 CVEs0 on KEV0 new
EP–
E-pares
Fujitsu
3 CVEs0 on KEV0 new
IA–
Interstage Application Server Enterprise
Fujitsu
3 CVEs0 on KEV0 new
IA–
Interstage Application Server Standard J
Fujitsu
3 CVEs0 on KEV0 new
IS5.9
Interstage Studio
Fujitsu
3 CVEs0 on KEV0 new
LF9.8
Lx390 Firmware
Fujitsu
3 CVEs0 on KEV0 new
SE5.9
Sparc Enterprise M3000 Firmware
Fujitsu
3 CVEs0 on KEV0 new
SE5.9
Sparc Enterprise M4000 Firmware
Fujitsu
3 CVEs0 on KEV0 new
SE5.9
Sparc Enterprise M5000 Firmware
Fujitsu
3 CVEs0 on KEV0 new
SE5.9
Sparc Enterprise M8000 Firmware
Fujitsu
3 CVEs0 on KEV0 new
SE5.9
Sparc Enterprise M9000 Firmware
Fujitsu
3 CVEs0 on KEV0 new
SL–
Systemcastwizard Lite
Fujitsu
3 CVEs0 on KEV0 new
AT–
Arrows Tab Lte F-01d
Fujitsu
2 CVEs0 on KEV0 new
EC9.8
Eternus Cs8000 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IA–
Interstage Application Server Plus
Fujitsu
2 CVEs0 on KEV0 new
IA–
Interstage Apworks
Fujitsu
2 CVEs0 on KEV0 new
IA–
Interstage Apworks Enterprise
Fujitsu
2 CVEs0 on KEV0 new
IA–
Interstage Apworks Modelers J
Fujitsu
2 CVEs0 on KEV0 new
IA–
Interstage Apworks Standard J
Fujitsu
2 CVEs0 on KEV0 new
IS–
Interstage Studio Enterprise
Fujitsu
2 CVEs0 on KEV0 new
IS–
Interstage Studio Standard J
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 DC 3200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 DC 3500 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 IN 3200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 IN 3500 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 LB 3200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 LB 3500 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 SC 3200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IE9.8
Ipcom Ex2 SC 3500 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS 100 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS 200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS 220 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS Plus 100 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS Plus 200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS Plus 220 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS Plus2 200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 LS Plus2 220 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 SC Plus 100 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 SC Plus 200 Firmware
Fujitsu
2 CVEs0 on KEV0 new
IV9.8
Ipcom Ve2 SC Plus 220 Firmware
Fujitsu
2 CVEs0 on KEV0 new
LO9.8
Linux openFT
Fujitsu
2 CVEs0 on KEV0 new
OO9.8
Oracle Solaris openFT
Fujitsu
2 CVEs0 on KEV0 new
RP–
Regza Phone T-01d
Fujitsu
2 CVEs0 on KEV0 new
SI7.5
Software Infrastructure Manager
Fujitsu
2 CVEs0 on KEV0 new
AK–
Arrows Kiss F-03d
Fujitsu
1 CVEs0 on KEV0 new
AM–
Arrows ME F-11d
Fujitsu
1 CVEs0 on KEV0 new
AN4.2
Arrows NX F05-f Firmware
Fujitsu
1 CVEs0 on KEV0 new
AX–
Arrows X Lte F-05d
Fujitsu
1 CVEs0 on KEV0 new
CF5.9
Celsius Firmware
Fujitsu
1 CVEs0 on KEV0 new
CH–
Chocoa
Fujitsu
1 CVEs0 on KEV0 new
DC7.8
Displayview Click
Fujitsu
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-16606 | LO Linux openFT Fujitsu | 9.8 | Jul 22 | Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris |
| CVE-2026-16607 | LO Linux openFT Fujitsu | 7.8 | Jul 22 | Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris |
| CVE-2024-39921 | IV Ipcom Ve2 LS 100 Firmware Fujitsu | 7.5 | Sep 4 | Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series… |
| CVE-2024-40617 | NE Network Edgiot Gw1500 Firmware Fujitsu | 6.5 | Jul 17 | Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) |
| CVE-2023-40238 | ED Esprimo D7012 Firmware Fujitsu | 5.5 | Dec 7 | A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before… |
| CVE-2023-4096 | AA Arconte Aurea Fujitsu | 8.2 | Sep 19 | Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed… |
| CVE-2023-4095 | AA Arconte Aurea Fujitsu | 5.3 | Sep 19 | User enumeration vulnerability in Arconte Áurea 1.5.0.0 version |
| CVE-2023-4094 | AA Arconte Aurea Fujitsu | 8.2 | Sep 19 | ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a… |
| CVE-2023-4093 | AA Arconte Aurea Fujitsu | 6.1 | Sep 19 | Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version |
| CVE-2023-4092 | AA Arconte Aurea Fujitsu | 9.8 | Sep 19 | SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version |
| CVE-2023-39903 | SI Software Infrastructure Manager Fujitsu | 5.0 | Aug 7 | An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061 |
| CVE-2023-39379 | SI Software Infrastructure Manager Fujitsu | 7.5 | Aug 4 | Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form |
| CVE-2023-38555 | S5 Sr-m 50ap1 Firmware Fujitsu | 8.8 | Jul 26 | Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset… |
| CVE-2023-38433 | IF Ip-he900e Firmware Fujitsu | 7.5 | Jul 26 | Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a… |
| CVE-2023-22377 | TD Tsclinical Define.xml Generator Fujitsu | 7.4 | Feb 15 | Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop… |
| CVE-2022-31795 | EC Eternus Cs8000 Firmware Fujitsu | 9.8 | Jun 20 | An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04 |
| CVE-2022-31794 | EC Eternus Cs8000 Firmware Fujitsu | 9.8 | Jun 20 | An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04 |
| CVE-2022-29516 | IE Ipcom EX LB 2300 Firmware Fujitsu | 9.8 | May 18 | The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM… |
| CVE-2022-28806 | LA Lifebook A3510 Firmware Fujitsu | 7.8 | May 4 | An issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449) with BIOS versions before v1.09… |
| CVE-2022-27089 | PN Plugfree Network Fujitsu | 7.8 | Apr 11 | In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to potentially escalate privileges to system level |
| CVE-2021-20722 | SM Scansnap Manager Fujitsu | 7.8 | May 24 | Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and… |
| CVE-2020-17457 | SR Serverview Remote Management Fujitsu | 5.4 | Mar 17 | Fujitsu ServerView Suite iRMC before 9.62F allows XSS |
| CVE-2021-23840 | MF M12-2s Firmware Fujitsu | 7.5 | Feb 16 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… |
| CVE-2021-3326 | MF M10-4s Firmware Fujitsu | 7.5 | Jan 27 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the… |
| CVE-2020-8177 | MF M10-4 Firmware Fujitsu | 7.8 | Dec 14 | curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used |
| CVE-2020-8285 | MF M10-4 Firmware Fujitsu | 7.5 | Dec 14 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing |
| CVE-2020-8284 | MF M10-4 Firmware Fujitsu | 3.7 | Dec 14 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… |
| CVE-2020-29127 | ES Eternus Storage Dx200 S4 Firmware Fujitsu | 9.8 | Nov 30 | An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25 |
| CVE-2020-1968 | MF M10-4 Firmware Fujitsu | 3.7 | Sep 9 | The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a… |
| CVE-2020-13817 | MF M10-4 Firmware Fujitsu | 7.4 | Jun 4 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… |
| CVE-2019-13163 | IA Interstage Application Server Fujitsu | 5.9 | Feb 7 | The Fujitsu TLS library allows a man-in-the-middle attack |
| CVE-2019-18201 | LF Lx390 Firmware Fujitsu | 7.5 | Oct 24 | An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices |
| CVE-2019-18200 | LF Lx390 Firmware Fujitsu | 9.8 | Oct 24 | An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices |
| CVE-2019-18199 | LF Lx390 Firmware Fujitsu | 6.6 | Oct 24 | An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices |
| CVE-2019-12762 | AN Arrows NX F05-f Firmware Fujitsu | 4.2 | Jun 6 | Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just… |
| CVE-2018-16156 | PI Paperstream IP (twain) Fujitsu | 7.8 | May 17 | In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the… |
| CVE-2019-9835 | LF Lx901 Firmware Fujitsu | 9.6 | Mar 15 | The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection |
| CVE-2019-6111 | MF M12-1 Firmware Fujitsu | 5.9 | Jan 31 | An issue was discovered in OpenSSH 7.9 |
| CVE-2019-6109 | MF M10-4 Firmware Fujitsu | 6.8 | Jan 31 | An issue was discovered in OpenSSH 7.9 |
| CVE-2018-20685 | MF M10-4 Firmware Fujitsu | 5.3 | Jan 10 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of |
| CVE-2017-3210 | DC Displayview Click Fujitsu | 7.8 | Jul 24 | Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution |
| CVE-2018-1000007 | MF M10-1 Firmware Fujitsu | 9.8 | Jan 24 | libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties |
| CVE-2016-8610 | MF M10-1 Firmware Fujitsu | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… |
| CVE-2017-10855 | FE Fence-explorer Fujitsu | 7.8 | Sep 15 | Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2015-2808 | SE Sparc Enterprise M3000 Firmware Fujitsu | 3.7 | Apr 1 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… |
| CVE-2014-7254 | AM Arrows ME F-11d Fujitsu | – | Dec 5 | Unspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or modify flash memory via unknown vectors |
| CVE-2014-7253 | AK Arrows Kiss F-03d Fujitsu | – | Dec 5 | FUJITSU F-12C, ARROWS Tab LTE F-01D, ARROWS Kiss F-03D, and REGZA Phone T-01D for Android allows local users to execute arbitrary commands via unspecified vectors |
| CVE-2014-7252 | AT Arrows Tab Lte F-01d Fujitsu | – | Dec 5 | Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney… |
| CVE-2014-3898 | SO Serverview Operations Manager Fujitsu | – | Aug 14 | Cross-site scripting (XSS) vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via… |
| CVE-2013-7105 | IA Interstage Application Server Fujitsu | – | Dec 14 | Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio… |
| CVE-2013-2251 In wildKEV | IB Interstage Business Process Manager Analytics Fujitsu | 9.8 | Jul 18 | Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction:… |
| CVE-2013-2566 | SE Sparc Enterprise M3000 Firmware Fujitsu | 5.9 | Mar 15 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via… |
| CVE-2010-2151 | EP E-pares Fujitsu | – | Jun 3 | Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for… |
| CVE-2010-2150 | EP E-pares Fujitsu | – | Jun 3 | Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01 L01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |
| CVE-2010-2149 | EP E-pares Fujitsu | – | Jun 3 | Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors |
| CVE-2010-1942 | IA Interstage Application Server Fujitsu | – | May 19 | Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage… |
| CVE-2008-7195 | IA Interstage Application Server Fujitsu | – | Sep 10 | Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of… |
| CVE-2008-7194 | IA Interstage Application Server Fujitsu | – | Sep 10 | Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of… |
| CVE-2009-0868 | JA Jasmine2000 Fujitsu | – | Mar 10 | CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response… |
| CVE-2009-0867 | ES Enhanced Support Facility Fujitsu | – | Mar 10 | The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software information via unspecified requests in a… |
