Known vulnerabilities in Red Hat Single Sign-On - page 12

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25834 - Deserialization of Untrusted Data
CVE-2019-14893		 CWE-502 High
No
No
 7.3.6 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 15 more
#VU25833 - Deserialization of Untrusted Data
CVE-2019-14892		 CWE-502 High
No
No
 7.3.6 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 16 more
#VU23380 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14837		 CWE-200 Medium
No
No
 7.3.5 04.12.2019 SB2019120402
SB2019120403
SB2019120404
and 2 more
#VU23017 - Improper Authorization
CVE-2019-14843		 CWE-285 Low
No
No
 7.3.5 27.11.2019 SB2019100723
SB2019100724
SB2019100823
and 8 more
#VU23014 - Permissions, Privileges, and Access Controls
CVE-2019-14838		 CWE-264 Low
No
No
 7.3.5 27.11.2019 SB2019101415
SB2019112708
SB2019112709
and 8 more
#VU22876 - Improper input validation
CVE-2013-7285		 CWE-20 High
Available
No
 7.3.6 20.11.2019 SB2019072308
SB2019112016
SB2016121356
and 7 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 7.3.6 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 7.3.6 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU21594 - Improper input validation
CVE-2019-17267		 CWE-20 Medium
No
No
 7.3.6 07.10.2019 SB2019100710
SB2019102422
SB2019120206
and 19 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 7.3.6 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21580 - Improper input validation
CVE-2019-16942		 CWE-20 Medium
No
No
 7.3.6 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU21136 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16335		 CWE-200 Medium
No
No
 7.3.6 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 21 more
#VU21135 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14540		 CWE-200 Medium
Available
No
 7.3.6 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 23 more
#VU20413 - Improper Authentication
CVE-2019-10201		 CWE-287 High
No
No
 7.3.3 27.08.2019 SB2019081436
SB2020072802
SB2019081386
#VU20410 - Cross-Site Request Forgery (CSRF)
CVE-2019-10199		 CWE-352 Low
No
No
 7.3.3 27.08.2019 SB2019081435
SB2019081386
#VU20337 - Resource Management Errors
CVE-2019-9515		 CWE-399 Medium
No
No
 7.3.5 20.08.2019 SB2019082005
SB2019082402
SB2019091011
and 39 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 7.3.5 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 7.3.5 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more
#VU19942 - Deserialization of Untrusted Data
CVE-2018-12022		 CWE-502 Medium
No
No
 7.3.1 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 18 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 7.3.1 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more


Showing elements 221 - 240 out of 255