Known vulnerabilities in Red Hat Camel for Spring Boot - page 6

Vendor: Red Hat Inc.
Software: Red Hat Camel for Spring Boot
Software CPE: cpe:2.3:a:red_hat:red_hat_camel_for_spring_boot:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 150
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Camel for Spring Boot Red Hat Camel for Spring Boot is affected by 150 known vulnerabilities: 23 high, 113 medium, 14 low Critical High Medium Low

Vulnerabilities (150)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 4.0.0 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80782 - Deserialization of Untrusted Data
CVE-2023-33008		 CWE-502 Medium
No
No
 4.0.0 14.09.2023 SB2023091430
SB2023091522
SB2023092111
and 8 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 3.18.3 Patch 2 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-24815		 CWE-22 Medium
No
No
 3.20.1 Patch 1 22.06.2023 SB2023062269
SB2023062321
SB2023090722
and 4 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 4.0.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 3.18.3 Patch 2, 3.20.2 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU76427 - Resource Management Errors
CVE-2023-20883		 CWE-399 Medium
No
No
 3.18.3 Patch 2, 3.20.1 Patch 1 23.05.2023 SB2023052310
SB2023052311
SB2023061548
and 42 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 3.18.3 Patch 2, 3.20.1 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 3.18.3 Patch 2, 3.20.2 21.04.2023 SB2023042129
SB2023042132
SB2023060816
and 16 more
#VU75218 - Resource exhaustion
CVE-2023-26048		 CWE-400 Medium
No
No
 4.0.0 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 4.0.0 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 3.18.3 Patch 1, 3.18.3 Patch 2, 3.20.1 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 3.18.3 Patch 2 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 3.18.3 Patch 2, 3.20.1 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 3.14.5 Patch 1, 3.18.3 Patch 2 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363		 CWE-200 Low
No
No
 3.14.5 Patch 1, 3.18.3 Patch 2 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 3.18.3 Patch 2, 3.20.1 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 3.18.3 Patch 2, 3.20.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 3.18.3 Patch 2, 3.20.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 3.18.3 Patch 2 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 101 - 120 out of 150