Known vulnerabilities in Red Hat Integration - Service Registry

Vendor: Red Hat Inc.
Software: Red Hat Integration - Service Registry
Software CPE: cpe:2.3:a:red_hat:red_hat_integration_-_service_registry:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Integration - Service Registry Red Hat Integration - Service Registry is affected by 40 known vulnerabilities: 4 high, 30 medium, 6 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 1 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU88189 - Missing release of memory after effective lifetime
CVE-2024-1023		 CWE-401 Medium
No
No
 2.5.11 05.04.2024 SB2024040542
SB2024042554
SB2024042918
and 10 more
#VU88188 - Missing release of memory after effective lifetime
CVE-2024-1300		 CWE-401 Medium
No
No
 2.5.11 05.04.2024 SB2024040543
SB2024041939
SB2024042554
and 13 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 2.5.11 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 2.5.11 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 137 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 2.5.11 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 101 more
#VU83886 - Cleartext Transmission of Sensitive Information
CVE-2023-1584		 CWE-319 Low
No
No
 2.5.4 05.12.2023 SB2023120534
SB2023120535
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2.5.4 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU80813 - Security Features
CVE-2023-4853		 CWE-254 Medium
No
No
 2.5.4 15.09.2023 SB2023091507
SB2023092243
SB2023092247
and 13 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2.5.4 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 2.5.4 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU76753 - Allocation of Resources Without Limits or Throttling
CVE-2023-28867		 CWE-770 Medium
No
No
 2.4.3 01.06.2023 SB2023060123
SB2023062739
SB2023063014
and 17 more
#VU74260 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-4742		 CWE-94 Medium
No
No
 2.4.3 31.03.2023 SB2023033132
SB2023033133
SB2023062739
and 1 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 2.4.3 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 2.4.3 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71253 - Improper input validation
CVE-2022-3510		 CWE-20 Medium
No
No
 2.4.3 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 2.4.3 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3782		 CWE-22 Medium
No
No
 2.4.3 13.12.2022 SB2022121342
SB2022121346
SB2022121348
and 14 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 2.4.3 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 2.4.3 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 1 - 20 out of 40