Known vulnerabilities in API Portal February 2023

Vendor: Axway
Software: API Portal
Version: February 2023
Software CPE: cpe:2.3:a:axway:api_portal:*:*:*:*:*:*:*:*
Website: https://www.axway.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting API Portal version February 2023 API Portal February 2023 is affected by 7 vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77058 - Configuration
 CWE-16 Low
No
No
 May 2023 07.06.2023 SB2023060716
#VU77057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 May 2023 07.06.2023 SB2023060716
#VU77056 - Use of Potentially Dangerous Function
 CWE-676 Medium
No
No
 May 2023 07.06.2023 SB2023060716
#VU77053 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-27560		 CWE-835 Medium
No
No
 May 2023 07.06.2023 SB2023060714
SB2023060716
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 August 2023 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU72314 - Resource exhaustion
CVE-2022-3064		 CWE-400 Medium
No
No
 May 2023 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU64913 - Incorrect Regular Expression
CVE-2022-31147		 CWE-185 Medium
No
No
 August 2023 04.07.2022 SB2022070444
SB2023100327
SB2024011764