Known vulnerabilities in API Gateway November 2021 - page 3

Vendor: Axway
Software: API Gateway
Version: November 2021
Software CPE: cpe:2.3:a:axway:api_gateway:*:*:*:*:*:*:*:*
Website: https://www.axway.com/
Total vulnerabilities: 64
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting API Gateway version November 2021 API Gateway November 2021 is affected by 64 vulnerabilities: 1 critical, 9 high, 39 medium, 15 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74264 - Improper Access Control
 CWE-284 Low
No
No
 August 2022 31.03.2023 SB2023033136
#VU74263 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 May 2022 31.03.2023 SB2023033135
#VU74262 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
 CWE-113 Medium
No
No
 May 2022 31.03.2023 SB2023033135
#VU74261 - Information Exposure Through Log Files
 CWE-532 Low
No
No
 May 2022 31.03.2023 SB2023033135
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Public exploit available
No
 August 2022 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65496 - Improper input validation
CVE-2022-21541		 CWE-20 Medium
No
No
 August 2022 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65498 - Improper input validation
CVE-2022-21549		 CWE-20 Medium
No
No
 August 2022 20.07.2022 SB2022072046
SB2022072047
SB2022072735
and 34 more
#VU62397 - Improper input validation
CVE-2022-21449		 CWE-20 Medium
Public exploit available
No
 August 2022 19.04.2022 SB2022041944
SB2022041945
SB2022042106
and 24 more
#VU62398 - Improper input validation
CVE-2022-21476		 CWE-20 Medium
No
No
 August 2022 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 69 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 August 2022 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 August 2022 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 August 2022 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 August 2022 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 May 2022 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 August 2022, May 2022 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 February 2022 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU57485 - Improper input validation
CVE-2021-35560		 CWE-20 Medium
No
No
 May 2022 19.10.2021 SB2021101940
SB2022020177
SB2022021424
and 28 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161		 CWE-94 Medium
No
No
 May 2022 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 May 2022 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU36063 - Improper input validation
CVE-2018-20801		 CWE-20 Medium
No
No
 May 2022 14.03.2019 SB2019031416
SB2023033135
SB2023053119


Showing elements 41 - 60 out of 64