Known vulnerabilities in Consul

Vendor: HashiCorp
Software: Consul
Software CPE: cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Consul Consul is affected by 54 known vulnerabilities: 2 high, 46 medium, 6 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744
CWE-1059 Low
No
No
1.20.2 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
1.20.2 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Available
No
1.20.2 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU99582 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-10005
CWE-22 Medium
No
No
1.20.1 01.11.2024 SB2024110123
#VU99581 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2024-10006
CWE-644 Medium
No
No
1.20.1 01.11.2024 SB2024110123
#VU99580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10086
CWE-79 Low
No
No
1.20.0 01.11.2024 SB2024110121
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
1.20.2 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
1.18.2 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU89295 - Untrusted Search Path
CVE-2024-24787
CWE-426 Medium
No
No
1.18.2 09.05.2024 SB2024050936
SB2024050937
SB2024050938
and 12 more
#VU88855 - Incorrect Check of Function Return Value
CVE-2024-32475
CWE-253 Medium
No
No
1.18.2 19.04.2024 SB2024041931
SB2024052109
SB2024070220
and 2 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458
CWE-401 Medium
No
No
1.20.2 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
1.20.2 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 91 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
1.18.2 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU88180 - Resource exhaustion
CVE-2024-27919
CWE-400 Medium
No
No
1.18.2 05.04.2024 SB2024040529
SB2024052109
SB2024100411
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
1.18.2 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87201 - Improper input validation
CVE-2024-24784
CWE-20 Medium
No
No
1.16.7, 1.17.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.16.7, 1.17.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
1.16.7, 1.17.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
1.16.7, 1.17.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU34130 - Permissions, Privileges, and Access Controls
CVE-2020-8559
CWE-264 Medium
Available
No
1.18.2 22.07.2020 SB2020072221
SB2020120203
SB2020121809
and 6 more


Showing elements 1 - 20 out of 54