Besu

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36025 Sep 24, 02:15 Maven CRITICAL PATCH Act Now

Besu is a Java-based Ethereum client. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Besu Linuxfoundation

NVD GitHub

CVSS 3.1

9.1

EPSS

0.9%

CVE-2021-41272 Dec 13, 21:15 HIGH PATCH This Week

Besu is an Ethereum client written in Java. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Canonical Besu Linuxfoundation

NVD GitHub

CVSS 3.1

7.5

EPSS

1.4%

CVE-2021-21369 Mar 09, 18:15 MEDIUM PATCH This Month

Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Besu Linuxfoundation

NVD GitHub

CVSS 3.1

6.5

EPSS

1.5%

CVE-2022-36025 Maven

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Besu is a Java-based Ethereum client. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Besu Linuxfoundation

NVD GitHub

CVE-2021-41272

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Besu is an Ethereum client written in Java. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Canonical Besu +1

NVD GitHub

CVE-2021-21369

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Denial Of Service Besu Linuxfoundation

NVD GitHub