Known vulnerabilities in Cryostat - page 8

Vendor: Red Hat Inc.
Software: Cryostat
Software CPE: cpe:2.3:a:red_hat:cryostat:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 156
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cryostat Cryostat is affected by 156 known vulnerabilities: 22 high, 94 medium, 40 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 - 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 - 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU64275 - Deserialization of Untrusted Data
CVE-2022-28948		 CWE-502 Medium
No
No
 2.1.1 14.06.2022 SB2022061420
SB2022061421
SB2022080821
and 15 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 2.1.1 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU62398 - Improper input validation
CVE-2022-21476		 CWE-20 Medium
No
No
 2.1.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 69 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 2.1.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 2.1.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 2.1.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 2.1.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 2.1.0 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61763 - Use After Free
CVE-2022-1154		 CWE-416 High
No
No
 2.1.0 31.03.2022 SB2022033113
SB2022033115
SB2022041528
and 33 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189		 CWE-918 Medium
No
No
 2.1.1 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 2.1.0, 2.1.1 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 2.1.1 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU56217 - Memory corruption
CVE-2021-3634		 CWE-119 High
No
No
 2.1.1 31.08.2021 SB2021083135
SB2021083136
SB2022011903
and 46 more
#VU52902 - Improper Validation of Array Index
CVE-2021-3121		 CWE-129 High
No
No
 2.1.0 06.05.2021 SB2021011120
SB2021050602
SB2021050603
and 34 more


Showing elements 141 - 160 out of 156