Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Autodesk Fusion — autodesk.com/trust/security-advisories/adsk-sa-2026-0005 Clear all filters
TI-2026-03780 CVE-2026-4344 · GHSA-355c-p2wf-x6ff

Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name

Priority LOW 33

A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion des…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00204 Published 2026-04-14 Fixed in 2702.1.47 CWE-79
TI-2026-03781 CVE-2026-4345 · GHSA-96vp-26rc-8483

Stored Cross-Site Scripting (XSS) Vulnerability in Design Name

Priority LOW 33

A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00204 Published 2026-04-14 Fixed in 2702.1.47 CWE-79
TI-2026-03805 CVE-2026-4369 · GHSA-mm54-xvph-7p9r

Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name

Priority LOW 33

A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fu…

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.002 Published 2026-04-14 Fixed in 2702.1.47 CWE-79