Known vulnerabilities in API Manager May 2022 - page 2
Vendor:
Axway
Software:
API Manager
Version:
May 2022
Software CPE:
cpe:2.3:a:axway:api_manager:*:*:*:*:*:*:*:*
Website:
https://www.axway.com/
Total vulnerabilities:
51
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
August 2025
4.4.0
4.5.0
-
4.3.0
4.2.0
4.1.0
4.0.0
3.2.1
3.2.0
3.1.0
August 2024
November 2023
August 2023
May 2023
April 2019
February 2023
November 2022
August 2022
May 2022
February 2022
November 2021
August 2021
May 2021
March 2021
January 2021
November 2020
September 2020
July 2020
May 2020
March 2020
January 2020
Vulnerabilities (51)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU74265 - Improper Access Control |
CWE-284 | Low | November 2022 | 31.03.2023 |
SB2023033137 |
||
| #VU74264 - Improper Access Control |
CWE-284 | Low | August 2022 | 31.03.2023 |
SB2023033136 |
||
| #VU74259 - URL Redirection to Untrusted Site ('Open Redirect') |
CWE-601 | Low | November 2022 | 31.03.2023 |
SB2023033137 |
||
| #VU71999 - NULL Pointer Dereference CVE-2023-0401 |
CWE-476 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020774 and 52 more |
||
| #VU71997 - Release of invalid pointer or reference CVE-2023-0216 |
CWE-763 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020774 and 50 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71994 - Out-of-bounds read CVE-2022-4203 |
CWE-125 | Medium | February 2023 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020774 and 47 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | November 2022 | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU71314 - Improper input validation CVE-2022-40153 |
CWE-20 | Medium | November 2022 | 18.01.2023 |
SB2023011841 SB2023012670 SB2023021321 and 21 more |
||
| #VU68896 - Memory corruption CVE-2022-3786 |
CWE-119 | Medium | November 2022 | 01.11.2022 |
SB2022110132 SB2022110133 SB2022110144 and 44 more |
||
| #VU68895 - Memory corruption CVE-2022-3602 |
CWE-119 | High | November 2022 | 01.11.2022 |
SB2022110132 SB2022110133 SB2022110144 and 45 more |
||
| #VU68438 - Improper input validation CVE-2022-21626 |
CWE-20 | Medium | November 2022 | 18.10.2022 |
SB2022101901 SB2022101902 SB2022102012 and 157 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | November 2022 | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | November 2022 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU65496 - Improper input validation CVE-2022-21541 |
CWE-20 | Medium | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 105 more |
||
| #VU65497 - Improper input validation CVE-2022-21540 |
CWE-20 | Medium | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 105 more |
||
| #VU65498 - Improper input validation CVE-2022-21549 |
CWE-20 | Medium | August 2022 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072735 and 34 more |
||
| #VU62397 - Improper input validation CVE-2022-21449 |
CWE-20 | Medium | August 2022 | 19.04.2022 |
SB2022041944 SB2022041945 SB2022042106 and 24 more |
Showing elements 21 - 40 out of 51