Known vulnerabilities in Red Hat Camel for Spring Boot - page 4

Vendor: Red Hat Inc.
Software: Red Hat Camel for Spring Boot
Software CPE: cpe:2.3:a:red_hat:red_hat_camel_for_spring_boot:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 145
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Camel for Spring Boot Red Hat Camel for Spring Boot is affected by 145 known vulnerabilities: 21 high, 110 medium, 14 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 4.4.0, 4.4.3 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97959 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45294		 CWE-611 High
No
No
 3.20.7, 4.4.0, 4.4.3 02.10.2024 SB2024100240
SB2024100242
SB2024100249
and 2 more
#VU97683 - Allocation of Resources Without Limits or Throttling
CVE-2024-8391		 CWE-770 Medium
No
No
 4.4.0 24.09.2024 SB2024092475
SB2024092527
SB2024100250
and 2 more
#VU97630 - Missing release of memory after effective lifetime
CVE-2024-41172		 CWE-401 Medium
No
No
 4.4.0, 4.4.2 20.09.2024 SB2024091810
SB2024092018
SB2024100250
and 5 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 4.4.0 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU97458 - Improper input validation
CVE-2024-32007		 CWE-20 Medium
No
No
 3.20.7, 4.4.0 18.09.2024 SB2024091810
SB2024091815
SB2024100249
and 10 more
#VU97457 - Server-Side Request Forgery (SSRF)
CVE-2024-29736		 CWE-918 Medium
No
No
 3.20.7 18.09.2024 SB2024091810
SB2024100249
SB20241015142
and 6 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816		 CWE-22 Medium
Available
No
 4.4.3 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU96900 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7885		 CWE-200 Medium
No
No
 3.20.7, 4.4.2 05.09.2024 SB2024090598
SB2024090599
SB2024092018
and 16 more
#VU96052 - Resource exhaustion
CVE-2024-5971		 CWE-400 Medium
No
No
 3.20.7, 4.4.2 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 11 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 4.4.2 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 4.4.3 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU93103 - Resource exhaustion
CVE-2023-5685		 CWE-400 Medium
No
No
 4.4.0 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255		 CWE-362 Low
No
No
 4.4.0 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 4.4.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 4.4.0 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 4.4.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU87615 - Resource exhaustion
CVE-2023-52428		 CWE-400 Medium
No
No
 3.20.7, 4.4.3 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733		 CWE-200 Medium
Available
No
 4.4.0 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 4.4.0 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more


Showing elements 61 - 80 out of 145