Known vulnerabilities in API Gateway November 2021

Vendor: Axway
Software: API Gateway
Version: November 2021
Software CPE: cpe:2.3:a:axway:api_gateway:*:*:*:*:*:*:*:*
Website: https://www.axway.com/
Total vulnerabilities: 64
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting API Gateway version November 2021 API Gateway November 2021 is affected by 64 vulnerabilities: 1 critical, 9 high, 39 medium, 15 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77045 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 May 2023 07.06.2023 SB2023060702
#VU77044 - Improper input validation
 CWE-20 Low
No
No
 May 2023 07.06.2023 SB2023060702
#VU77043 - Incorrect Default Permissions
 CWE-276 Low
No
No
 May 2023 07.06.2023 SB2023060702
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 May 2023 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75366 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29199		 CWE-913 Medium
Public exploit available
No
 May 2023 20.04.2023 SB2023042015
SB2023042019
SB2023042047
and 7 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 May 2023 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU74606 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29017		 CWE-913 High
Public exploit available
No
 May 2023 10.04.2023 SB2023041004
SB2023041839
SB2023042019
and 9 more
#VU74268 - Security Features
 CWE-254 Low
No
No
 February 2023 31.03.2023 SB2023033138
#VU74267 - Improper Control of Interaction Frequency
 CWE-799 Medium
No
No
 February 2023 31.03.2023 SB2023033138
#VU74266 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 February 2023 31.03.2023 SB2023033138
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 August 2023 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 August 2023 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 August 2023, May 2023 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 May 2023 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU71994 - Out-of-bounds read
CVE-2022-4203		 CWE-125 Medium
No
No
 February 2023 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 February 2023 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 February 2023 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Public exploit available
No
 May 2023 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 May 2023 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU22273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16728		 CWE-79 Low
No
No
 February 2023 24.10.2019 SB2019102414
SB2023033138
SB2024020623


Showing elements 1 - 20 out of 64