Known vulnerabilities in Red Hat Single Sign-On - page 10

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72727 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-2237		 CWE-601 Low
No
No
 7.6.2 02.03.2023 SB2023030258
SB2023030259
#VU72725 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-0264		 CWE-288 Medium
Available
No
 7.6.2 02.03.2023 SB2023030251
SB2023030253
SB2023030255
and 3 more
#VU72724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1438		 CWE-79 Low
No
No
 7.6.2 02.03.2023 SB2023030250
SB2023030253
SB2023030255
and 3 more
#VU72722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1274		 CWE-79 Low
No
No
 7.6.2 02.03.2023 SB2023030250
SB2023030253
SB2023030255
and 3 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 7.6.2 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 46 more
#VU71139 - Improper Authorization
CVE-2023-0091		 CWE-285 Medium
No
No
 7.6.2 12.01.2023 SB2023011260
SB2023030253
SB2023030255
and 3 more
#VU71109 - Out-of-bounds write
CVE-2022-45693		 CWE-787 Medium
No
No
 7.6.2 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 7.6.2 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363		 CWE-200 Low
No
No
 7.6.2 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 7.6.2 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 7.6.2 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 7.6.2 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 53 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 7.6.2 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 67 more
#VU55102 - Resource exhaustion
CVE-2021-35065		 CWE-400 Medium
No
No
 7.6.2 21.07.2021 SB2021072101
SB2023020668
SB2023020971
and 24 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 7.6.2 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 7.6.2 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 7.6.2 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 7.6.2 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 7.6.2 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more


Showing elements 181 - 200 out of 255