Known vulnerabilities in Red Hat Virtualization Manager 4.3

Vendor: Red Hat Inc.
Software: Red Hat Virtualization Manager
Version: 4.3
Software CPE: cpe:2.3:a:red_hat:red_hat_virtualization_manager:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 33
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat Virtualization Manager version 4.3 Red Hat Virtualization Manager 4.3 is affected by 33 vulnerabilities: 4 high, 12 medium, 17 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 - 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU50042 - Out-of-bounds read
CVE-2020-29443		 CWE-125 Medium
No
No
 - 26.01.2021 SB2021012636
SB2021060940
SB2021061423
and 2 more
#VU45985 - Out-of-bounds write
CVE-2020-14364		 CWE-787 Medium
Public exploit available
No
 - 24.08.2020 SB2020082410
SB2020090715
SB2020091121
and 35 more
#VU44163 - Reachable Assertion
CVE-2020-16092		 CWE-617 Medium
No
No
 - 11.08.2020 SB2020081102
SB2020090715
SB2020101311
and 9 more
#VU27996 - Improper input validation
CVE-2020-10723		 CWE-20 Medium
No
No
 - 19.05.2020 SB2020051904
SB2020051905
SB2020052105
and 11 more
#VU27994 - Improper input validation
CVE-2020-10722		 CWE-20 Medium
No
No
 - 19.05.2020 SB2020051904
SB2020051905
SB2020052105
and 11 more
#VU27389 - Use After Free
CVE-2020-1983		 CWE-416 Medium
Public exploit available
No
 - 28.04.2020 SB2020042818
SB2020043016
SB2020050725
and 16 more
#VU27388 - Missing release of memory after effective lifetime
CVE-2019-20382		 CWE-401 Medium
No
No
 - 28.04.2020 SB2019090618
SB2020040749
SB2020043016
and 8 more
#VU25510 - Heap-based Buffer Overflow
CVE-2020-1711		 CWE-122 Medium
No
No
 - 21.02.2020 SB2020022116
SB2020030419
SB2020030612
and 14 more
#VU25456 - Memory corruption
CVE-2020-8608		 CWE-119 Low
No
No
 - 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more
#VU48780 - Memory corruption
CVE-2015-8011		 CWE-119 High
No
No
 - 28.01.2020 SB2020012836
SB2020120408
SB2020120409
and 17 more
#VU24168 - Improper input validation
CVE-2019-17195		 CWE-20 Medium
No
No
 - 09.01.2020 SB2019101519
SB2020010921
SB2020040218
and 20 more
#VU22771 - Memory corruption
CVE-2019-17042		 CWE-119 High
No
No
 - 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU22770 - Memory corruption
CVE-2019-17041		 CWE-119 High
No
No
 - 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU20499 - NULL Pointer Dereference
CVE-2019-12155		 CWE-476 Medium
No
No
 - 02.09.2019 SB2019090204
SB2019090303
SB2019090501
and 11 more
#VU20446 - Heap-based Buffer Overflow
CVE-2019-14378		 CWE-122 Medium
No
No
 - 28.08.2019 SB2019082401
SB2019090204
SB2019090303
and 22 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Public exploit available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 - 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 - 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more


Showing elements 1 - 20 out of 33