Known vulnerabilities in API Gateway May 2022 - page 2
Vendor:
Axway
Software:
API Gateway
Version:
May 2022
Software CPE:
cpe:2.3:a:axway:api_gateway:*:*:*:*:*:*:*:*
Website:
https://www.axway.com/
Total vulnerabilities:
51
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
Vulnerabilities (51)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU74265 - Improper Access Control |
CWE-284 | Low | November 2022 | 31.03.2023 |
SB2023033137 |
||
| #VU74264 - Improper Access Control |
CWE-284 | Low | August 2022 | 31.03.2023 |
SB2023033136 |
||
| #VU74259 - URL Redirection to Untrusted Site ('Open Redirect') |
CWE-601 | Low | November 2022 | 31.03.2023 |
SB2023033137 |
||
| #VU71999 - NULL Pointer Dereference CVE-2023-0401 |
CWE-476 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020774 and 52 more |
||
| #VU71997 - Release of invalid pointer or reference CVE-2023-0216 |
CWE-763 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020774 and 50 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71994 - Out-of-bounds read CVE-2022-4203 |
CWE-125 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020774 and 47 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | November 2022 | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU71314 - Improper input validation CVE-2022-40153 |
CWE-20 | Medium | November 2022 | 18.01.2023 |
SB2023011841 SB2023012670 SB2023021321 and 21 more |
||
| #VU68896 - Memory corruption CVE-2022-3786 |
CWE-119 | Medium | November 2022 | 01.11.2022 |
SB2022110132 SB2022110133 SB2022110144 and 44 more |
||
| #VU68895 - Memory corruption CVE-2022-3602 |
CWE-119 | High | November 2022 | 01.11.2022 |
SB2022110132 SB2022110133 SB2022110144 and 45 more |
||
| #VU68438 - Improper input validation CVE-2022-21626 |
CWE-20 | Medium | November 2022 | 18.10.2022 |
SB2022101901 SB2022101902 SB2022102012 and 157 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | November 2022 | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | November 2022 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU65496 - Improper input validation CVE-2022-21541 |
CWE-20 | Medium | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 105 more |
||
| #VU65497 - Improper input validation CVE-2022-21540 |
CWE-20 | Medium | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 105 more |
||
| #VU65498 - Improper input validation CVE-2022-21549 |
CWE-20 | Medium | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072735 and 34 more |
||
| #VU62397 - Improper input validation CVE-2022-21449 |
CWE-20 | Medium | August 2022 | 19.04.2022 |
SB2022041944 SB2022041945 SB2022042106 and 24 more |
Showing elements 21 - 40 out of 51