Known vulnerabilities in Consul - page 2

Vendor: HashiCorp
Software: Consul
Software CPE: cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Consul Consul is affected by 54 known vulnerabilities: 2 high, 46 medium, 6 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
1.15.11, 1.16.7, 1.17.4 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.16.7, 1.17.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426
CWE-776 Medium
No
No
1.16.7, 1.17.4 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 23 more
#VU86230 - Resource exhaustion
CVE-2023-52425
CWE-400 Medium
No
No
1.16.7, 1.17.4 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
1.14.11, 1.15.7, 1.16.3 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.14.11, 1.15.7, 1.16.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
1.14.10, 1.15.6, 1.16.2 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
1.14.10, 1.15.6, 1.16.2 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319
CWE-79 Medium
No
No
1.14.10, 1.15.6, 1.16.2 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318
CWE-79 Medium
No
No
1.14.10, 1.15.6, 1.16.2 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU80571 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39320
CWE-94 Medium
No
No
1.14.10, 1.15.6, 1.16.2 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 15 more
#VU80038 - Improper input validation
CVE-2023-0845
CWE-20 Medium
No
No
1.14.5 28.08.2023 SB2023082823
SB2023082830
SB2023082831
and 2 more
#VU80034 - Unchecked Return Value
CVE-2022-40716
CWE-252 Low
No
No
1.11.9, 1.12.5, 1.13.2 28.08.2023 SB2022092687
SB2023082830
SB2023082831
and 6 more
#VU80033 - Missing Authorization
CVE-2021-41803
CWE-862 Medium
No
No
1.11.9, 1.12.5, 1.13.2 28.08.2023 SB2022092412
SB2023082830
SB2023082831
and 1 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
1.13.7, 1.14.5 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
1.13.7, 1.14.5 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
1.12.8, 1.13.5, 1.14.3 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69422 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3920
CWE-200 Medium
No
No
1.14.0 18.11.2022 SB2022111823
SB2023010241
SB2022121635
and 4 more
#VU59041 - Improper Access Control
CVE-2021-41805
CWE-284 Medium
Available
No
1.8.17, 1.9.11, 1.10.4 16.12.2021 SB2021121609
#VU56146 - Improper Authentication
CVE-2021-37219
CWE-287 Medium
No
No
1.8.15, 1.9.9, 1.10.2 30.08.2021 SB2021083001
SB2022080439
SB2023070622


Showing elements 21 - 40 out of 54