Known vulnerabilities in Argo CD 2.10.3

Vendor: Argo
Software: Argo CD
Version: 2.10.3
Software CPE: cpe:2.3:a:argo:argo-cd:*:*:*:*:*:kubernetes:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Argo CD version 2.10.3 Argo CD 2.10.3 is affected by 13 vulnerabilities: 8 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129012 - Improper Check or Handling of Exceptional Conditions
CVE-2025-59531
CWE-703 Medium
No
No
2.14.20, 3.0.19, 3.1.8 02.05.2026 SB20260502154
#VU109950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47933
CWE-79 Low
No
No
2.13.8, 2.14.13, 3.0.4 29.05.2025 SB20250529128
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
2.10.17, 2.11.9, 2.12.4 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU129006 - Improper Access Control
CVE-2024-41666
CWE-284 Low
No
No
2.9.21, 2.10.16, 2.11.7 24.07.2024 SB2024072445
#VU94676 - Resource exhaustion
CVE-2024-40634
CWE-400 Medium
No
No
2.9.20, 2.10.15, 2.11.6 23.07.2024 SB2024072331
SB2024072701
SB2024080205
and 1 more
#VU129004 - Missing Authentication for Critical Function
CVE-2024-37152
CWE-306 Medium
No
No
2.9.17, 2.10.12, 2.11.3 06.06.2024 SB2024060643
#VU129005 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36106
CWE-200 Low
No
No
2.9.17, 2.10.12, 2.11.3 06.06.2024 SB2024060643
#VU89045 - Improper input validation
CVE-2024-32476
CWE-20 Medium
No
No
2.8.17, 2.9.13, 2.10.8 29.04.2024 SB2024042924
#VU89009 - Resource exhaustion
CVE-2024-29893
CWE-400 Medium
No
No
2.8.14, 2.9.10, 2.10.5 25.04.2024 SB2024042557
SB2024042564
SB2024042565
and 2 more
#VU89008 - Security Features
CVE-2024-21662
CWE-254 Medium
No
No
2.8.13, 2.9.9, 2.10.4 25.04.2024 SB2024042556
SB2024042564
SB2024042565
and 2 more
#VU89007 - Security Features
CVE-2024-21652
CWE-254 Medium
No
No
2.8.13, 2.9.9, 2.10.4 25.04.2024 SB2024042556
SB2024042564
SB2024042565
and 2 more
#VU89006 - Resource Management Errors
CVE-2024-21661
CWE-399 Medium
No
No
2.8.13, 2.9.9, 2.10.4 25.04.2024 SB2024042556
SB2024042564
SB2024042565
and 2 more
#VU129003 - Improper Access Control
CVE-2024-31990
CWE-284 Low
No
No
2.8.16, 2.9.12, 2.10.7 15.04.2024 SB2024041578
SB20240611289