Known vulnerabilities in Istio
Vendor:
Istio
Software:
Istio
Software CPE:
cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
Website:
https://istio.io/
Total vulnerabilities:
61
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.30.3
1.29.6
1.28.10
1.30.2
1.29.5
1.28.9
1.30.1
1.29.4
1.28.8
1.30.0
1.29.3
1.28.7
1.29.2
1.28.6
1.27.9
1.29.1
1.28.5
1.27.8
1.29.0
1.28.4
1.27.7
1.27.6
1.28.3
1.28.2
1.27.5
1.26.8
1.28.1
1.27.4
1.26.7
1.28.0
1.27.3
1.26.6
1.27.2
1.26.5
1.27.1
1.26.4
1.25.5
1.27.0
1.25.4
1.26.3
1.26.2
1.26.1
1.25.3
1.24.6
1.26.0
1.25.2
1.24.5
1.23.6
1.25.1
1.24.4
1.25.0
1.23.5
1.24.3
1.22.8
1.23.4
1.24.2
1.22.7
1.24.1
1.24.0
1.23.3
1.22.6
1.21.6
1.23.2
1.22.5
1.23.1
1.22.4
1.23.0
1.22.3
1.21.5
1.20.8
1.22.2
1.21.4
1.22.1
1.21.3
1.20.7
1.22.0
1.21.2
1.20.6
1.19.10
1.21.1
1.20.5
1.19.9
1.20.4
1.19.8
1.21.0
1.20.3
1.19.7
1.20.2
1.19.6
1.18.7
1.20.1
1.19.5
1.18.6
1.20.0
1.19.4
1.19.3
1.18.5
1.17.8
1.19.1
1.17.6
1.18.3
1.19.0
1.18.2
1.17.5
1.16.7
1.18.1
1.17.4
1.16.6
1.18.0
1.17.3
1.16.5
1.17.2
1.16.4
1.15.7
1.17.1
1.16.3
1.15.6
1.17.0
1.16.2
1.15.5
1.16.1
1.15.4
1.14.6
1.16.0
1.15.3
1.15.2
1.14.5
1.13.9
1.15.1
1.14.4
1.13.8
1.15.0
1.14.3
1.13.7
1.13.6
1.14.2
1.12.9
1.14.1
1.13.5
1.12.8
1.14.0
1.13.4
1.12.7
1.13.3
1.12.6
1.13.2
1.12.5
1.11.8
1.13.1
1.12.4
1.11.7
1.13.0
1.12.3
1.11.6
1.12.2
1.12.1
1.10.6
1.11.5
1.12.0
1.11.4
1.9.9
1.10.5
1.11.3
1.11.2
1.9.8
1.10.4
1.11.1
1.11.0
1.9.7
1.10.3
1.9.6
1.10.2
1.10.1
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.2.4
0.2.6
0.2.7
0.2.9
0.2.10
0.2.11
0.2.12
0.3.0
0.4.0
0.5.0
0.5.1
0.6.0
0.7.0
0.7.1
0.8.0
1.0.0
1.1.0
1.1.16
1.1.17
1.2.0
1.2.7
1.2.8
1.2.9
1.2.10
1.3.0
1.10.0
1.9.5
1.9.4
1.9.3
1.9.2
1.9.1
1.9.0
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.8
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.14
1.6.13
1.6.12
1.6.11
1.6.10
1.6.9
1.6.8
1.6.7
1.6.6
1.6.5
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.10
1.5.9
1.5.8
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.10
1.4.9
1.4.8
1.4.7
1.4.6
1.4.5
1.4.0
1.4.4
1.4.3
1.4.2
1.4.1
1.4
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.2.6
1.1.15
1.3
1.2.5
1.1.14
1.2.4
1.1.13
1.2.3
1.1.12
1.1.11
1.2.2
1.2.1
1.1.10
1.0.9
1.2
1.1.9
1.0.8
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0
0.8
0.7
0.6
0.5
0.4
0.3
0.2
0.1
Vulnerabilities (61)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126613 - Server-Side Request Forgery (SSRF) CVE-2026-41413 |
CWE-918 | Low | 1.28.6, 1.29.2 | 20.04.2026 |
SB20260420114 |
||
| #VU126609 - Improper Access Control CVE-2026-31838 |
CWE-284 | Medium | 1.27.8, 1.28.5, 1.29.1 | 20.04.2026 |
SB20260420115 |
||
| #VU126607 - Protection Mechanism Failure CVE-2026-31837 |
CWE-693 | Medium | 1.27.8, 1.28.5, 1.29.1 | 20.04.2026 |
SB20260420115 |
||
| #VU126603 - Permissive Regular Expression CVE-2026-39350 |
CWE-625 | Low | 1.27.9, 1.28.6, 1.29.2 | 20.04.2026 |
SB20260420114 |
||
| #VU114763 - Insufficient Session Expiration CVE-2025-55162 |
CWE-613 | Low | 1.25.5, 1.26.4, 1.27.1 | 03.09.2025 |
SB2025090341 SB2025090352 |
||
| #VU114762 - Use After Free CVE-2025-54588 |
CWE-416 | Medium | 1.25.5, 1.26.4, 1.27.1 | 03.09.2025 |
SB2025090341 SB2025090352 |
||
| #VU101847 - NULL Pointer Dereference CVE-2024-53270 |
CWE-476 | Medium | 1.22.7, 1.23.4, 1.24.2 | 19.12.2024 |
SB2024121911 SB2024121913 SB2025020519 |
||
| #VU101846 - Resource Management Errors CVE-2024-53271 |
CWE-399 | Medium | 1.22.7, 1.23.4, 1.24.2 | 19.12.2024 |
SB2024121911 SB2024121913 |
||
| #VU101845 - Improper input validation CVE-2024-53269 |
CWE-20 | Low | 1.22.7, 1.23.4, 1.24.2 | 19.12.2024 |
SB2024121909 SB2024121913 |
||
| #VU97627 - Resource Management Errors CVE-2024-45807 |
CWE-399 | Medium | 1.22.5, 1.23.2 | 20.09.2024 |
SB2024092014 SB2024092023 |
||
| #VU97626 - Improper Output Neutralization for Logs CVE-2024-45808 |
CWE-117 | Medium | 1.22.5, 1.23.2 | 20.09.2024 |
SB2024092014 SB2024092023 SB2024100826 |
||
| #VU97625 - Improper input validation CVE-2024-45806 |
CWE-20 | Medium | 1.22.5, 1.23.2 | 20.09.2024 |
SB2024092014 SB2024092023 SB2024100825 and 1 more |
||
| #VU97624 - NULL Pointer Dereference CVE-2024-45809 |
CWE-476 | Medium | 1.22.5, 1.23.2 | 20.09.2024 |
SB2024092014 SB2024092023 |
||
| #VU97623 - Resource Management Errors CVE-2024-45810 |
CWE-399 | Medium | 1.22.5, 1.23.2 | 20.09.2024 |
SB2024092014 SB2024092023 SB2024100826 |
||
| #VU91158 - Memory corruption CVE-2024-34364 |
CWE-119 | Medium | 1.20.7, 1.21.3, 1.22.1 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91157 - Use of Weak Credentials CVE-2024-23326 |
CWE-1391 | Medium | 1.20.7, 1.21.3, 1.22.1 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 and 1 more |
||
| #VU91156 - Use After Free CVE-2024-34362 |
CWE-416 | Medium | 1.20.7, 1.21.3, 1.22.1 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91155 - Uncaught Exception CVE-2024-34363 |
CWE-248 | Medium | 1.20.7, 1.21.3, 1.22.1 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91154 - Use After Free CVE-2024-32974 |
CWE-416 | Medium | 1.20.7, 1.21.3, 1.22.1 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91153 - Integer underflow CVE-2024-32975 |
CWE-191 | Medium | 1.20.7, 1.21.3, 1.22.1 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
Showing elements 1 - 20 out of 61