Known vulnerabilities in Red Hat build of Quarkus - page 3

Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_quarkus:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Quarkus Red Hat build of Quarkus is affected by 66 known vulnerabilities: 12 high, 43 medium, 11 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83981 - Improper Access Control
CVE-2023-6393
CWE-284 Low
No
No
2.13.9 07.12.2023 SB2023120729
SB2023120731
#VU83977 - Insufficient Entropy
CVE-2023-31582
CWE-331 Medium
No
No
2.13.9 07.12.2023 SB2023120724
SB2023120727
SB2023120731
and 17 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410
CWE-502 Medium
No
No
2.13.9, 3.2.9 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642
CWE-770 Medium
No
No
2.13.9, 3.2.9 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
3.2.9 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
2.13.8 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81427 - UNIX Symbolic Link (Symlink) Following
CVE-2023-35887
CWE-61 Low
No
No
2.13.9 03.10.2023 SB2023100336
SB2023100337
SB2023100453
and 21 more
#VU80813 - Security Features
CVE-2023-4853
CWE-254 Medium
No
No
2.13.8 15.09.2023 SB2023091507
SB2023092243
SB2023092247
and 13 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
2.13.9 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77362 - Resource exhaustion
CVE-2023-34455
CWE-400 Medium
No
No
2.13.9 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454
CWE-190 Medium
No
No
2.13.9 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453
CWE-190 Medium
No
No
2.13.9 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
2.13.9 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU72324 - Exposure of sensitive information to an unauthorized actor
CVE-2023-0044
CWE-200 Low
No
No
2.7.7, 2.13.7 16.02.2023 SB2023021631
SB2023030906
SB2023102326
and 1 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
2.7.7 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
2.7.7 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
2.7.7 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
2.7.7 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
2.7.7 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197
CWE-89 High
No
No
2.7.7 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more


Showing elements 41 - 60 out of 66