Known vulnerabilities in Red Hat Single Sign-On - page 11

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72726 - Configuration
CVE-2022-4039		 CWE-16 High
No
No
 7.6.2 02.03.2023 SB2023030253
#VU72723 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-4137		 CWE-79 Medium
No
No
 7.6.2 02.03.2023 SB2023030250
SB2023030255
SB2023030256
and 2 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 7.6.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 7.6.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 7.6.2 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3782		 CWE-22 Medium
No
No
 7.6.1, 7.6.2 13.12.2022 SB2022121342
SB2022121346
SB2022121348
and 14 more
#VU70166 - Insufficient Session Expiration
CVE-2022-3916		 CWE-613 Low
No
No
 7.6.1, 7.6.2 13.12.2022 SB2022121340
SB2022121346
SB2022121348
and 7 more
#VU69919 - Resource Management Errors
CVE-2022-2764		 CWE-399 Medium
No
No
 7.6.2 06.12.2022 SB2022120605
SB2022120615
SB2022120616
and 7 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 7.6.2 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 7.6.2 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU67936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0225		 CWE-79 Low
No
No
 7.5.3, 7.6.1 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 6 more
#VU67935 - Permissions, Privileges, and Access Controls
CVE-2022-2668		 CWE-264 Low
No
No
 7.5.3, 7.6.1 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 5 more
#VU67933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-2256		 CWE-79 Low
No
No
 7.5.3 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 2 more
#VU64037 - Incorrect Authorization
CVE-2022-0866		 CWE-863 Low
No
No
 7.5.3, 7.6.1 07.06.2022 SB2022060718
SB2022060838
SB2022100530
and 6 more
#VU63159 - Allocation of Resources Without Limits or Throttling
CVE-2022-0084		 CWE-770 Low
No
No
 7.5.3, 7.6.1 13.05.2022 SB2022051310
SB2022051311
SB2022060838
and 12 more
#VU62795 - Missing Authorization
CVE-2022-1245		 CWE-862 Medium
No
No
 - 04.05.2022 SB2022050415
SB2022050431
SB2022050432
#VU61937 - Deserialization of Untrusted Data
CVE-2021-42392		 CWE-502 Critical
Available
No
 7.5.3, 7.6.1 06.04.2022 SB2022040617
SB2022040619
SB2022042257
and 10 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 7.5.3, 7.6.1 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 50 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 7.5.3, 7.6.1 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 7.5.2 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 170 more


Showing elements 201 - 220 out of 255