Known vulnerabilities in Katello

Known vulnerabilities in Katello

Vendor: Katello Project

Software: Katello

Software CPE: cpe:2.3:a:katello_project:katello:*:*:*:*:*:*:*:*

Website: https://github.com/Katello

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU34981 - Resource exhaustion CVE-2013-4120	CWE-400	Medium	No	No	-	10.12.2019	SB2016060705
#VU35004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2013-0283	CWE-79	Low	No	No	-	05.12.2019	SB2016060705
#VU16566 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2018-14623	CWE-89	Low	No	No	-	12.12.2018	SB2018121718
#VU36767 - Improper Privilege Management CVE-2017-2662	CWE-269	Low	No	No	-	22.08.2018	SB2018082222
#VU37146 - Improper input validation CVE-2013-4201	CWE-20	Low	No	No	-	01.05.2018	SB2016060705
#VU40246 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2016-3072	CWE-89	High	No	No	-	07.06.2016	SB2016060705 SB2016051617
#VU41181 - Resource Management Errors CVE-2014-3712	CWE-399	Medium	No	No	-	03.11.2014	SB2014110305
#VU43045 - Exposure of sensitive information to an unauthorized actor CVE-2012-5561	CWE-200	Low	No	No	-	01.03.2013	SB2013030103