Known vulnerabilities in Argo CD - page 2

Vendor: Argo
Software: Argo CD
Software CPE: cpe:2.3:a:argo:argo-cd:*:*:*:*:*:kubernetes:*:*
Total vulnerabilities: 68
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Argo CD Argo CD is affected by 68 known vulnerabilities: 6 high, 34 medium, 28 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89008 - Security Features
CVE-2024-21662
CWE-254 Medium
No
No
2.8.13, 2.9.9, 2.10.4 25.04.2024 SB2024042556
SB2024042564
SB2024042565
and 2 more
#VU89007 - Security Features
CVE-2024-21652
CWE-254 Medium
No
No
2.8.13, 2.9.9, 2.10.4 25.04.2024 SB2024042556
SB2024042564
SB2024042565
and 2 more
#VU89006 - Resource Management Errors
CVE-2024-21661
CWE-399 Medium
No
No
2.8.13, 2.9.9, 2.10.4 25.04.2024 SB2024042556
SB2024042564
SB2024042565
and 2 more
#VU129003 - Improper Access Control
CVE-2024-31990
CWE-284 Low
No
No
2.8.16, 2.9.12, 2.10.7 15.04.2024 SB2024041578
SB20240611289
#VU87525 - Improper Access Control
CVE-2023-50726
CWE-284 Medium
No
No
2.8.12, 2.9.8, 2.10.3 14.03.2024 SB2024031428
SB2024042564
SB2024042565
and 2 more
#VU87524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28175
CWE-79 Low
No
No
2.8.12, 2.9.8, 2.10.3 14.03.2024 SB2024031428
SB2024031970
SB2024031971
and 1 more
#VU85634 - Cross-Site Request Forgery (CSRF)
CVE-2024-22424
CWE-352 Low
No
No
2.7.16, 2.8.8, 2.9.4, 2.10.0 rc2 22.01.2024 SB2024012212
#VU80557 - Exposure of sensitive information to an unauthorized actor
CVE-2023-40029
CWE-200 Medium
No
No
2.6.15, 2.7.14, 2.8.3 08.09.2023 SB2023090822
SB2023090846
SB2023091175
#VU80556 - Improper input validation
CVE-2023-40584
CWE-20 Medium
No
No
2.6.15, 2.7.14, 2.8.3 08.09.2023 SB2023090822
SB2023090846
SB2023091175
#VU79955 - Insufficient Session Expiration
CVE-2023-40025
CWE-613 Low
No
No
2.7.12, 2.8.1 24.08.2023 SB2023082437
SB2024080205
SB2024080206
#VU73992 - Information Exposure Through an Error Message
CVE-2022-41354
CWE-209 Low
No
No
2.4.28, 2.5.16, 2.6.7 23.03.2023 SB2023032365
SB2023032406
SB2023032407
and 1 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
2.6.8 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
2.4.26, 2.5.14, 2.6.5 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72475 - Permissions, Privileges, and Access Controls
CVE-2023-23947
CWE-264 Medium
No
No
2.3.17, 2.4.23, 2.5.11, 2.6.2 21.02.2023 SB2023022184
SB2023022185
#VU72074 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25163
CWE-200 Medium
No
No
2.6.1 08.02.2023 SB2023020876
#VU71569 - Improper Authorization
CVE-2023-22736
CWE-285 Low
No
No
2.5.8 26.01.2023 SB2023012633
SB2023012635
#VU71568 - Improper Authorization
CVE-2023-22482
CWE-285 Medium
No
No
2.3.14, 2.4.20, 2.5.8 26.01.2023 SB2023012633
SB2023012634
SB2023012635
and 1 more
#VU70142 - Improper Locking
CVE-2022-3996
CWE-667 Low
No
No
2.3.13, 2.4.19 13.12.2022 SB2022121328
SB2022122614
SB2023011834
and 12 more
#VU67640 - Integer overflow
CVE-2022-35951
CWE-190 Low
No
No
2.4.19 26.09.2022 SB2022092612
SB2022092953
SB2023011835
and 1 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
2.3.13, 2.4.19 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more


Showing elements 21 - 40 out of 68