Known vulnerabilities in SecureTransport 5.5-20210624 - page 2

Vendor: Axway
Software: SecureTransport
Version: 5.5-20210624
Software CPE: cpe:2.3:a:axway:securetransport:*:*:*:*:*:*:*:*
Website: https://www.axway.com/
Total vulnerabilities: 92
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SecureTransport version 5.5-20210624 SecureTransport 5.5-20210624 is affected by 92 vulnerabilities: 1 critical, 9 high, 60 medium, 22 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 5.5-20230126 04.04.2023 SB2023040470
#VU74445 - Improper input validation
 CWE-20 High
No
No
 5.5-20221124 04.04.2023 SB2023040468
#VU74270 - Improper Verification of Cryptographic Signature
CVE-2023-22899		 CWE-347 Medium
No
No
 5.5-20230223 31.03.2023 SB2023033140
SB2023040471
SB2023041871
and 6 more
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 5.5-20221222 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 5.5-20230126 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71314 - Improper input validation
CVE-2022-40153		 CWE-20 Medium
No
No
 5.5-20221222, 5.5-20230126 18.01.2023 SB2023011841
SB2023012670
SB2023021321
and 21 more
#VU71109 - Out-of-bounds write
CVE-2022-45693		 CWE-787 Medium
No
No
 5.5-20230126 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU71108 - Out-of-bounds write
CVE-2022-45685		 CWE-787 Medium
No
No
 5.5-20230126 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 5.5-20230126 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 5.5-20230126 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915		 CWE-113 Medium
No
No
 5.5-20230126 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 5.5-20221222 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 5.5-20221222 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 5.5-20221124 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68506 - Improper input validation
CVE-2021-28490		 CWE-20 High
No
No
 5.5-20230223 19.10.2022 SB2022101976
SB2023040471
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 5.5-20221124 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68439 - Improper input validation
CVE-2022-21618		 CWE-20 Medium
No
No
 5.5-20221124 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 60 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 5.5-20221124 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 5.5-20221027 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 5.5-20221027 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more


Showing elements 21 - 40 out of 92