Known vulnerabilities in Consul Enterprise - page 2

Vendor: HashiCorp
Software CPE: cpe:2.3:a:hashicorp:consul_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 49
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Consul Enterprise Consul Enterprise is affected by 49 known vulnerabilities: 3 high, 37 medium, 9 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
1.14.11, 1.15.7, 1.16.3 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.14.11, 1.15.7, 1.15.10, 1.16.3, 1.16.6, 1.17.1, 1.17.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80038 - Improper input validation
CVE-2023-0845
CWE-20 Medium
No
No
1.14.5 28.08.2023 SB2023082823
SB2023082830
SB2023082831
and 2 more
#VU80034 - Unchecked Return Value
CVE-2022-40716
CWE-252 Low
No
No
1.11.9, 1.12.5, 1.13.2 28.08.2023 SB2022092687
SB2023082830
SB2023082831
and 6 more
#VU80033 - Missing Authorization
CVE-2021-41803
CWE-862 Medium
No
No
1.11.9, 1.12.5, 1.13.2 28.08.2023 SB2022092412
SB2023082830
SB2023082831
and 1 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978
CWE-79 Low
No
No
1.14.9, 1.15.5, 1.16.1 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
1.14.9, 1.15.5, 1.16.1 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406
CWE-644 Medium
No
No
1.14.9, 1.15.5, 1.16.1 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU77106 - Improper Access Control
CVE-2023-2816
CWE-284 Low
No
No
1.15.3 08.06.2023 SB2023060847
SB2024120801
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
1.13.8, 1.14.7, 1.15.3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
1.13.8, 1.14.7, 1.15.3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
1.13.8, 1.14.7, 1.15.3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
1.13.8, 1.14.7, 1.15.3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721
CWE-444 Medium
No
No
1.13.8, 1.14.7, 1.15.3 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
1.13.7, 1.13.8, 1.14.5, 1.14.7, 1.15.0, 1.15.3 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
1.13.7, 1.13.8, 1.14.5, 1.15.0 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
1.12.8, 1.13.5, 1.14.3 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720
CWE-22 Medium
No
No
1.12.8, 1.13.5, 1.14.3 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU69422 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3920
CWE-200 Medium
No
No
1.14.0 18.11.2022 SB2022111823
SB2023010241
SB2022121635
and 4 more
#VU67396 - Improper input validation
CVE-2022-27664
CWE-20 Medium
No
No
1.13.8, 1.14.7, 1.15.3 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more


Showing elements 21 - 40 out of 49