Known vulnerabilities in API Gateway February 2023

Known vulnerabilities in API Gateway February 2023

Vendor: Axway

Software: API Gateway

Version: February 2023

Software CPE: cpe:2.3:a:axway:api_gateway:*:*:*:*:*:*:*:*

Website: https://www.axway.com/

Total vulnerabilities: 13

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77045 - Exposure of sensitive information to an unauthorized actor	CWE-200	Low	No	No	May 2023	07.06.2023	SB2023060702
#VU77044 - Improper input validation	CWE-20	Low	No	No	May 2023	07.06.2023	SB2023060702
#VU77043 - Incorrect Default Permissions	CWE-276	Low	No	No	May 2023	07.06.2023	SB2023060702
#VU75431 - Uncontrolled Recursion CVE-2023-1436	CWE-674	Medium	No	No	May 2023	24.04.2023	SB2023042409 SB2023042411 SB2023050111 and 86 more
#VU75366 - Improper Control of Dynamically-Managed Code Resources CVE-2023-29199	CWE-913	Medium	Public exploit available	No	May 2023	20.04.2023	SB2023042015 SB2023042019 SB2023042047 and 7 more
#VU75044 - Uncontrolled Recursion CVE-2023-1370	CWE-674	Medium	No	No	May 2023	12.04.2023	SB2023041258 SB2023041259 SB2023041809 and 130 more
#VU74606 - Improper Control of Dynamically-Managed Code Resources CVE-2023-29017	CWE-913	High	Public exploit available	No	May 2023	10.04.2023	SB2023041004 SB2023041839 SB2023042019 and 9 more
#VU74149 - Security Features CVE-2023-0466	CWE-254	Low	No	No	August 2023	28.03.2023	SB2023032241 SB2023040666 SB2023040730 and 86 more
#VU74148 - Improper Verification of Cryptographic Signature CVE-2023-0465	CWE-347	Low	No	No	August 2023	28.03.2023	SB2023032241 SB2023040666 SB2023040730 and 100 more
#VU73960 - Resource exhaustion CVE-2023-0464	CWE-400	Medium	No	No	August 2023, May 2023	22.03.2023	SB2023032241 SB2023033057 SB2023033058 and 100 more
#VU72750 - Inefficient Algorithmic Complexity CVE-2022-25881	CWE-407	Medium	No	No	May 2023	03.03.2023	SB2023030326 SB2023030328 SB2023031112 and 61 more
#VU70385 - Deserialization of Untrusted Data CVE-2022-1471	CWE-502	High	Public exploit available	No	May 2023	15.12.2022	SB2022121539 SB2022121540 SB2022121928 and 124 more
#VU60834 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23450	CWE-94	High	No	No	May 2023	23.02.2022	SB2022022311 SB2022022312 SB2022031011 and 41 more