Known vulnerabilities in SecureTransport 5.5-20220428

Vendor: Axway
Version: 5.5-20220428
Software CPE: cpe:2.3:a:axway:securetransport:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SecureTransport version 5.5-20220428 SecureTransport 5.5-20220428 is affected by 63 vulnerabilities: 7 high, 38 medium, 18 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78284 - Improper Access Control
CWE-284 Medium
No
No
5.5-20230629 16.07.2023 SB2023071612
#VU77042 - Unrestricted Upload of File with Dangerous Type
CWE-434 High
No
No
5.5-20230525 07.06.2023 SB2023060701
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709
CWE-770 Medium
No
No
5.5-20230629 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436
CWE-674 Medium
No
No
5.5-20230427 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75264 - Improper input validation
CVE-2023-21939
CWE-20 Medium
Public exploit available
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938
CWE-20 Low
No
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968
CWE-20 Low
No
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937
CWE-20 Low
No
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930
CWE-20 Medium
No
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967
CWE-20 Medium
No
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954
CWE-20 Medium
No
No
5.5-20230525 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
5.5-20230525 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU74478 - Improper Access Control
CVE-2023-28154
CWE-284 Medium
No
No
5.5-20230629 05.04.2023 SB2023040511
SB2023040515
SB2023041244
and 9 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708
CWE-614 Low
No
No
5.5-20230427 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Public exploit available
No
5.5-20230330, 5.5-20230629 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU71287 - Improper input validation
CVE-2023-21835
CWE-20 Medium
No
No
5.5-20230525 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71288 - Improper input validation
CVE-2023-21830
CWE-20 Medium
No
No
5.5-20230525 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843
CWE-20 Low
No
No
5.5-20230525 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Public exploit available
No
5.5-20230330 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU27956 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2020-11971
CWE-350 Medium
No
No
5.5-20230629 17.05.2020 SB2020051702
SB2022042254
SB2022100521
and 5 more


Showing elements 1 - 20 out of 63