Known vulnerabilities in API Portal January 2020

Vendor: Axway
Software: API Portal
Version: January 2020
Software CPE: cpe:2.3:a:axway:api_portal:*:*:*:*:*:*:*:*
Website: https://www.axway.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting API Portal version January 2020 API Portal January 2020 is affected by 15 vulnerabilities: 2 high, 7 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77058 - Configuration
 CWE-16 Low
No
No
 May 2023 07.06.2023 SB2023060716
#VU77057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 May 2023 07.06.2023 SB2023060716
#VU77056 - Use of Potentially Dangerous Function
 CWE-676 Medium
No
No
 May 2023 07.06.2023 SB2023060716
#VU77053 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-27560		 CWE-835 Medium
No
No
 May 2023 07.06.2023 SB2023060714
SB2023060716
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 August 2023 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74449 - URL Redirection to Untrusted Site ('Open Redirect')
 CWE-601 Low
No
No
 February 2023 04.04.2023 SB2023040473
#VU74448 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 Low
No
No
 February 2023 04.04.2023 SB2023040473
#VU74447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 February 2023 04.04.2023 SB2023040473
#VU74260 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-4742		 CWE-94 Medium
No
No
 February 2022 31.03.2023 SB2023033132
SB2023033133
SB2023062739
and 1 more
#VU72314 - Resource exhaustion
CVE-2022-3064		 CWE-400 Medium
No
No
 May 2023 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU70109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23494		 CWE-79 Low
No
No
 February 2023 12.12.2022 SB2022121205
SB2023032042
SB2023032914
and 3 more
#VU64913 - Incorrect Regular Expression
CVE-2022-31147		 CWE-185 Medium
No
No
 August 2023 04.07.2022 SB2022070444
SB2023100327
SB2024011764
#VU63952 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7709		 CWE-94 Medium
No
No
 February 2022 02.06.2022 SB2022060213
SB2022060214
SB2023033133
#VU61046 - Type confusion
CVE-2021-23820		 CWE-843 High
No
No
 February 2022 07.03.2022 SB2021110319
SB2022030706
SB2022060214
and 2 more
#VU53439 - Integer overflow
CVE-2021-3520		 CWE-190 High
No
No
 February 2022 24.05.2021 SB2021052411
SB2021052522
SB2021052537
and 33 more