Known vulnerabilities in Consul - page 3

Vendor: HashiCorp
Software: Consul
Software CPE: cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Consul Consul is affected by 54 known vulnerabilities: 2 high, 46 medium, 6 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54947 - Improper input validation
CVE-2021-36213
CWE-20 Medium
No
No
1.9.8, 1.10.1 19.07.2021 SB2021071907
SB2021072709
SB2023091924
and 1 more
#VU54946 - Improper Certificate Validation
CVE-2021-32574
CWE-295 Medium
No
No
1.8.14, 1.9.8, 1.10.1 19.07.2021 SB2021071907
SB2021072709
SB2023091924
and 1 more
#VU52311 - Security Features
CVE-2021-28156
CWE-254 Medium
No
No
1.8.10, 1.9.5 16.04.2021 SB2021041637
SB2022081072
#VU52310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25864
CWE-79 Low
No
No
1.7.14, 1.8.10, 1.9.5 16.04.2021 SB2021041637
SB2023060515
SB2023091924
and 1 more
#VU48612 - Exposure of sensitive information to an unauthorized actor
CVE-2020-28053
CWE-200 Medium
No
No
1.6.10, 1.7.10, 1.8.6 23.11.2020 SB2020112404
SB2022081072
#VU47913 - Improper input validation
CVE-2020-25201
CWE-20 Medium
No
No
1.8.5 26.10.2020 SB2020102613
SB2022081072
#VU29134 - Memory corruption
CVE-2020-13250
CWE-119 Medium
No
No
1.6.6, 1.7.4 18.06.2020 SB2020061809
#VU29133 - Improper Resource Shutdown or Release
CVE-2020-12758
CWE-404 Medium
No
No
1.6.6, 1.7.4 18.06.2020 SB2020061809
#VU29132 - Permissions, Privileges, and Access Controls
CVE-2020-12797
CWE-264 Medium
No
No
1.6.6, 1.7.4 18.06.2020 SB2020061809
#VU29127 - Permissions, Privileges, and Access Controls
CVE-2020-13170
CWE-264 Medium
No
No
1.6.6, 1.7.4 18.06.2020 SB2020061809
#VU24942 - Resource exhaustion
CVE-2020-7219
CWE-400 Medium
No
No
1.6.3 05.02.2020 SB2020020510
SB2022112521
SB2023060515
#VU24941 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7955
CWE-200 Medium
No
No
1.6.3 05.02.2020 SB2020020510
#VU36038 - Security Features
CVE-2019-9764
CWE-254 Medium
No
No
- 26.03.2019 SB2019032619
SB2023091924
#VU18016 - Improper Authentication
CVE-2019-8336
CWE-287 High
No
No
1.4.3 19.03.2019 SB2019031902


Showing elements 41 - 60 out of 54