Known vulnerabilities in Red Hat Integration - Service Registry - page 2

Vendor: Red Hat Inc.
Software: Red Hat Integration - Service Registry
Software CPE: cpe:2.3:a:red_hat:red_hat_integration_-_service_registry:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 48
Public exploits: 2
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Integration - Service Registry Red Hat Integration - Service Registry is affected by 48 known vulnerabilities: 6 high, 36 medium, 6 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76753 - Allocation of Resources Without Limits or Throttling
CVE-2023-28867		 CWE-770 Medium
No
No
 2.4.3 01.06.2023 SB2023060123
SB2023062739
SB2023063014
and 17 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 2.4.3 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 2.4.3 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 53 more
#VU71253 - Improper input validation
CVE-2022-3510		 CWE-20 Medium
No
No
 2.4.3 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 2.4.3 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3782		 CWE-22 Medium
No
No
 2.4.3 13.12.2022 SB2022121342
SB2022121346
SB2022121348
and 14 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 2.4.3 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU67975 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41269		 CWE-94 High
No
No
 2.3.0 06.10.2022 SB2021111515
SB2022100650
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 2.3.0 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65780 - Improper Verification of Cryptographic Signature
CVE-2022-24773		 CWE-347 Medium
No
No
 2.3.0 26.07.2022 SB2022072613
SB2022082512
SB2022100650
and 4 more
#VU65749 - Improper Verification of Cryptographic Signature
CVE-2022-24771		 CWE-347 Medium
No
No
 2.3.0 25.07.2022 SB2022072517
SB2022082512
SB2022100554
and 9 more
#VU63481 - Incorrect Authorization
CVE-2022-0981		 CWE-863 Medium
No
No
 2.3.0 20.05.2022 SB2022072066
SB2022100650
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 2.3.0 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 37 more
#VU62714 - Improper Initialization
CVE-2022-21724		 CWE-665 Medium
No
No
 2.3.0 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU61668 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0536		 CWE-200 Low
No
No
 2.3.0 28.03.2022 SB2022032841
SB2022032843
SB2022042561
and 27 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 2.3.0 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU60729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23647		 CWE-79 Low
No
No
 2.3.0 21.02.2022 SB2022022105
SB2022100650
SB2022111738
and 1 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Available
No
 2.3.0 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 2.3.0 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 44 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 2.4.3 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 21 - 40 out of 48