Known vulnerabilities in SecureTransport 5.5-20220728 - page 3

Vendor: Axway
Version: 5.5-20220728
Software CPE: cpe:2.3:a:axway:securetransport:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SecureTransport version 5.5-20220728 SecureTransport 5.5-20220728 is affected by 58 vulnerabilities: 7 high, 37 medium, 14 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74444 - Externally-generated error message containing sensitive information
CWE-211 Low
No
No
5.5-20220825 04.04.2023 SB2023040465
#VU74443 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
5.5-20220825 04.04.2023 SB2023040465
#VU74442 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
5.5-20220825 04.04.2023 SB2023040465
#VU74271 - Resource exhaustion
CVE-2012-2098
CWE-400 Medium
No
No
5.5-20220825 31.03.2023 SB2012062904
SB2023040315
SB2023040465
and 10 more
#VU69673 - Out-of-bounds write
CVE-2022-40149
CWE-787 Medium
No
No
5.5-20220929, 5.5-20221027 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 41 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
5.5-20221027 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750
CWE-121 Medium
No
No
5.5-20220929 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749
CWE-121 Medium
No
No
5.5-20220929 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857
CWE-400 Medium
No
No
5.5-20220929 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752
CWE-121 Medium
No
No
5.5-20220929 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751
CWE-787 Medium
No
No
5.5-20220929 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197
CWE-89 High
No
No
5.5-20220825 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160
CWE-79 Low
No
No
5.5-20221027 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65495 - Improper input validation
CVE-2022-34169
CWE-20 High
Public exploit available
No
5.5-20220825 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU54856 - Resource exhaustion
CVE-2021-36374
CWE-400 Medium
No
No
5.5-20220825 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373
CWE-400 Medium
No
No
5.5-20220825 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945
CWE-276 Low
No
No
5.5-20220825 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979
CWE-264 Low
No
No
5.5-20220825 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 41 - 60 out of 58