Known vulnerabilities in Red Hat Camel for Spring Boot - page 6
Vendor:
Red Hat Inc.
Software:
Red Hat Camel for Spring Boot
Software CPE:
cpe:2.3:a:red_hat:red_hat_camel_for_spring_boot:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
145
Public exploits:
12
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (145)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2023-33201 |
CWE-90 | Medium | 3.18.3 Patch 2 | 17.07.2023 |
SB2023071740 SB2023071742 SB2023071902 and 91 more |
||
| #VU77643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-24815 |
CWE-22 | Medium | 3.20.1 Patch 1 | 22.06.2023 |
SB2023062269 SB2023062321 SB2023090722 and 4 more |
||
| #VU77362 - Resource exhaustion CVE-2023-34455 |
CWE-400 | Medium | 3.18.3 Patch 2, 3.20.2 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 48 more |
||
| #VU76427 - Resource Management Errors CVE-2023-20883 |
CWE-399 | Medium | 3.18.3 Patch 2, 3.20.1 Patch 1 | 23.05.2023 |
SB2023052310 SB2023052311 SB2023061548 and 42 more |
||
| #VU75431 - Uncontrolled Recursion CVE-2023-1436 |
CWE-674 | Medium | 3.18.3 Patch 2, 3.20.1 | 24.04.2023 |
SB2023042409 SB2023042411 SB2023050111 and 86 more |
||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | 3.18.3 Patch 1, 3.20.1 | 21.04.2023 |
SB2023042131 SB2023042132 SB2023050511 and 88 more |
||
| #VU75407 - Security Features CVE-2023-20873 |
CWE-254 | Medium | 3.18.3 Patch 2, 3.20.2 | 21.04.2023 |
SB2023042129 SB2023042132 SB2023060816 and 16 more |
||
| #VU75044 - Uncontrolled Recursion CVE-2023-1370 |
CWE-674 | Medium | 3.18.3 Patch 1, 3.18.3 Patch 2, 3.20.1 | 12.04.2023 |
SB2023041258 SB2023041259 SB2023041809 and 130 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | 3.18.3 Patch 2, 3.20.1 | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU70530 - Deserialization of Untrusted Data CVE-2022-45047 |
CWE-502 | High | 3.18.3 Patch 2 | 28.12.2022 |
SB2022122828 SB2022122920 SB2023011148 and 49 more |
||
| #VU70524 - Out-of-bounds write CVE-2022-41854 |
CWE-787 | Medium | 3.18.3 Patch 2, 3.20.1 | 28.12.2022 |
SB2022122813 SB2022122926 SB2023010417 and 52 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 3.18.3 Patch 2, 3.20.1 | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68827 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42890 |
CWE-94 | Low | 3.20.1 | 30.10.2022 |
SB2022103004 SB2022103009 SB2023030742 and 34 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 3.18.3 Patch 2, 3.20.1 | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU67668 - Stack-based buffer overflow CVE-2022-38750 |
CWE-121 | Medium | 3.18.3 Patch 2, 3.20.1 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU67666 - Stack-based buffer overflow CVE-2022-38749 |
CWE-121 | Medium | 3.18.3 Patch 2, 3.20.1 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 51 more |
||
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 3.18.3 Patch 2, 3.20.1 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU67664 - Stack-based buffer overflow CVE-2022-38752 |
CWE-121 | Medium | 3.18.3 Patch 2, 3.20.1 | 27.09.2022 |
SB2022092715 SB2022092728 SB2022100555 and 66 more |
||
| #VU67663 - Out-of-bounds write CVE-2022-38751 |
CWE-787 | Medium | 3.18.3 Patch 2, 3.20.1 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU59148 - Deserialization of Untrusted Data CVE-2021-46877 |
CWE-502 | Medium | 3.18.3 Patch 2 | 03.01.2022 |
SB2022010326 SB2022010327 SB2022062734 and 37 more |
Showing elements 101 - 120 out of 145