Known vulnerabilities in Red Hat Satellite - page 8

Software CPE: cpe:2.3:a:red_hat:red_hat_satellite:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 14
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Satellite Red Hat Satellite is affected by 293 known vulnerabilities: 1 critical, 36 high, 112 medium, 144 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83506 - Insufficiently Protected Credentials
CVE-2022-3644
CWE-522 Low
No
No
6.14 27.11.2023 SB2022102819
SB2023112747
#VU83505 - Server-Side Request Forgery (SSRF)
CVE-2022-4130
CWE-918 Low
No
No
6.14 27.11.2023 SB2023112747
SB2024030156
#VU82280 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-0462
CWE-94 Low
No
No
6.13.5, 6.11.5.6, 6.12.5.2 20.10.2023 SB2023102019
SB2023102351
SB2023102352
#VU79630 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24439
CWE-94 High
No
No
6.13.5 16.08.2023 SB2022120650
SB20230816235
SB2023082070
and 12 more
#VU72330 - Resource exhaustion
CVE-2023-24580
CWE-400 Medium
No
No
6.13 16.02.2023 SB2023021645
SB2023021648
SB2023031032
and 15 more
#VU71737 - Improper input validation
CVE-2023-23969
CWE-20 Medium
No
No
6.13 01.02.2023 SB2023020139
SB2023020143
SB2023020151
and 13 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899
CWE-185 Medium
No
No
6.13.3, 6.14 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
6.14 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946
CWE-276 Low
No
No
6.12.3, 6.13 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
6.13 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
6.13 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
6.12.1, 6.13 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67893 - Improper input validation
CVE-2022-41323
CWE-20 Medium
No
No
6.13 04.10.2022 SB2022100415
SB2022100429
SB2022101602
and 9 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750
CWE-121 Medium
No
No
6.13 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749
CWE-121 Medium
No
No
6.13 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752
CWE-121 Medium
No
No
6.13 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751
CWE-787 Medium
No
No
6.13 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU65868 - Deserialization of Untrusted Data
CVE-2022-32224
CWE-502 Medium
No
No
6.11.5, 6.12.1, 6.13 28.07.2022 SB2022072836
SB2023011881
SB2023050806
and 2 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980
CWE-94 High
Available
No
6.13 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
6.11.5.6, 6.12.5.2, 6.13.5, 6.14 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more


Showing elements 141 - 160 out of 293