Known vulnerabilities in Red Hat Decision Manager

Vendor: Red Hat Inc.
Software: Red Hat Decision Manager
Software CPE: cpe:2.3:a:red_hat:red_hat_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Decision Manager Red Hat Decision Manager is affected by 20 known vulnerabilities: 7 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 7.12.1 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU61720 - Improper input validation
CVE-2021-22096		 CWE-20 Medium
No
No
 7.12.1 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 7.12.1 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU54291 - Server-Side Request Forgery (SSRF)
CVE-2020-11988		 CWE-918 Medium
No
No
 7.11.0 21.06.2021 SB2021062143
SB2021062144
SB2021062145
and 15 more
#VU52572 - Deserialization of Untrusted Data
CVE-2021-21349		 CWE-502 Medium
Available
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52571 - Deserialization of Untrusted Data
CVE-2021-21351		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52570 - Resource exhaustion
CVE-2021-21341		 CWE-400 Medium
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52569 - Deserialization of Untrusted Data
CVE-2021-21342		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52568 - Deserialization of Untrusted Data
CVE-2021-21343		 CWE-502 Medium
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52566 - Resource exhaustion
CVE-2021-21348		 CWE-400 Medium
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52565 - Deserialization of Untrusted Data
CVE-2021-21350		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52564 - Deserialization of Untrusted Data
CVE-2021-21347		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52563 - Deserialization of Untrusted Data
CVE-2021-21346		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 28 more
#VU52561 - Deserialization of Untrusted Data
CVE-2021-21344		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 19 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 7.12.1 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 7.12.1 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU49040 - Improper input validation
CVE-2020-26259		 CWE-20 Medium
Available
No
 7.11.0 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 17 more
#VU49041 - Server-Side Request Forgery (SSRF)
CVE-2020-26258		 CWE-918 Medium
Available
No
 7.11.0 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 16 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 7.11.0 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more