Known vulnerabilities in ovirt-engine-extension-aaa-ldap (Red Hat package)

Vendor: Red Hat Inc.
Software: ovirt-engine-extension-aaa-ldap (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:ovirt-engine-extension-aaa-ldap_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ovirt-engine-extension-aaa-ldap (Red Hat package) ovirt-engine-extension-aaa-ldap (Red Hat package) is affected by 9 known vulnerabilities: 1 high, 5 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67131 - Information Exposure Through Log Files
CVE-2022-2806		 CWE-532 Low
No
No
 1.4.6-1.el8ev 08.09.2022 SB2022090832
SB2022090833
SB2022092637
and 1 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 1.4.6-1.el8ev 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU61720 - Improper input validation
CVE-2021-22096		 CWE-20 Medium
No
No
 1.4.6-1.el8ev 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU55315 - Incorrect Regular Expression
CVE-2021-23343		 CWE-185 Medium
No
No
 1.4.4-1.el8ev 26.07.2021 SB2021072624
SB2021072625
SB2022060618
and 24 more
#VU52985 - Incorrect Regular Expression
CVE-2020-28469		 CWE-185 Medium
No
No
 1.4.4-1.el8ev, 1.4.5-1.el8ev 10.05.2021 SB2021051002
SB2021051004
SB2021072625
and 26 more
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358		 CWE-94 High
No
No
 1.4.4-1.el8ev, 1.4.6-1.el8ev 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU47053 - Improper input validation
CVE-2020-7733		 CWE-20 Medium
No
No
 1.4.4-1.el8ev, 1.4.5-1.el8ev 16.09.2020 SB2020092407
SB2021072133
SB2021072625
and 1 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 1.4.6-1.el8ev 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 1.4.6-1.el8ev 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more