Known vulnerabilities in Cryostat - page 7

Vendor: Red Hat Inc.
Software: Cryostat
Software CPE: cpe:2.3:a:red_hat:cryostat:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 156
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cryostat Cryostat is affected by 156 known vulnerabilities: 22 high, 94 medium, 40 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 - 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU82143 - Improper input validation
CVE-2023-22025		 CWE-20 Low
No
No
 - 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 36 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 - 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 - 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 - 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 - 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80575 - Improper input validation
CVE-2023-39322		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 - 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 - 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 - 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU75432 - Permissions, Privileges, and Access Controls
CVE-2023-30630		 CWE-264 Low
No
No
 - 24.04.2023 SB2023042410
SB2023042412
SB2023042642
and 51 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 - 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537		 CWE-835 Medium
No
No
 2.3.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 2.3.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 2.3.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 2.3.0 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 2.3.0 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 2.3.0 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more


Showing elements 121 - 140 out of 156