Known vulnerabilities in Red Hat Single Sign-On - page 10

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53530 - Insufficient Session Expiration
CVE-2021-3461		 CWE-613 Low
No
No
 7.4.7 25.05.2021 SB2021052530
SB2021060137
SB2021052053
and 3 more
#VU53529 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-3424		 CWE-451 Medium
No
No
 7.4.7 25.05.2021 SB2021052530
SB2021052053
SB2021052054
and 2 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 7.4.7 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 7.4.7 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU51521 - Improper input validation
CVE-2020-35510		 CWE-20 Medium
No
No
 7.4.6 17.03.2021 SB2021031705
SB2021031707
SB2021032323
and 3 more
#VU51520 - Improper Access Control
CVE-2021-20250		 CWE-284 Medium
No
No
 7.4.6 17.03.2021 SB2021031704
SB2021031707
SB2021032323
and 1 more
#VU51518 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-20220		 CWE-444 Medium
No
No
 7.4.6 17.03.2021 SB2021031703
SB2021031707
SB2021032323
#VU51516 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10687		 CWE-444 Medium
No
No
 7.4.6 17.03.2021 SB2020092345
SB2021031707
SB2021032323
#VU49112 - Permissions, Privileges, and Access Controls
CVE-2020-27826		 CWE-264 Medium
No
No
 7.4.4 21.12.2020 SB2020122130
SB2020122206
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 7.4.6 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU49113 - Authentication Bypass by Capture-replay
CVE-2020-14302		 CWE-294 Medium
No
No
 7.4.6 15.12.2020 SB2020122131
SB2021032320
SB2021032321
and 2 more
#VU49114 - Server-Side Request Forgery (SSRF)
CVE-2020-10770		 CWE-918 Medium
Available
No
 7.4.5 15.12.2020 SB2020122131
SB2021020313
SB2021020314
and 1 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 7.4.6 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU30168 - Improper input validation
CVE-2020-1727		 CWE-20 Medium
No
No
 7.4.0 22.06.2020 SB2020062219
SB2020121744
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 7.4.6 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more
#VU27031 - Deserialization of Untrusted Data
CVE-2020-11619		 CWE-502 High
No
No
 7.4.0 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU26491 - Deserialization of Untrusted Data
CVE-2020-10968		 CWE-502 High
No
No
 7.4.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 15 more
#VU26490 - Deserialization of Untrusted Data
CVE-2020-11113		 CWE-502 High
Available
No
 7.4.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26489 - Deserialization of Untrusted Data
CVE-2020-11112		 CWE-502 High
No
No
 7.4.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26488 - Deserialization of Untrusted Data
CVE-2020-11111		 CWE-502 High
No
No
 7.4.0 31.03.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more


Showing elements 181 - 200 out of 255