Known vulnerabilities in Red Hat Single Sign-On - page 13

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28622 - Improper input validation
CVE-2018-14721		 CWE-20 High
No
No
 7.3.1 04.06.2020 SB2019101585
SB2019020720
SB2019050926
#VU22830 - Deserialization of Untrusted Data
CVE-2016-0750		 CWE-502 Medium
No
No
 7.2.1 19.11.2019 SB2018091110
SB2021040769
SB2017111658
and 1 more
#VU21706 - Insufficiently Protected Credentials
CVE-2019-3868		 CWE-522 Medium
No
No
 7.2.7, 7.3.1 10.10.2019 SB2019101007
SB2019042331
SB2019042332
and 2 more
#VU20068 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14642		 CWE-200 Medium
No
No
 7.3.1 13.08.2019 SB2018091807
SB2019050926
#VU20035 - Permissions, Privileges, and Access Controls
CVE-2019-3805		 CWE-264 Low
No
No
 7.3.1 09.08.2019 SB2019080913
SB2019050926
#VU19943 - Deserialization of Untrusted Data
CVE-2018-12023		 CWE-502 Medium
No
No
 7.3.1 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 20 more
#VU35944 - Permissions, Privileges, and Access Controls
CVE-2019-3894		 CWE-264 High
No
No
 7.3.1 03.05.2019 SB2018062717
SB2019050926
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720		 CWE-611 Low
No
No
 7.3.1 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721		 CWE-918 Low
No
No
 7.3.1 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more
#VU16030 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-14658		 CWE-601 Low
No
No
 - 23.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16029 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14657		 CWE-200 Low
No
No
 - 23.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16028 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14655		 CWE-79 Low
No
No
 - 23.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16027 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10894		 CWE-200 Low
No
No
 - 13.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16031 - Memory corruption
CVE-2018-14627		 CWE-119 Low
No
No
 - 13.11.2018 SB2018112307
SB2018110822
SB2018110823
#VU6547 - Authentication Bypass Issues
CVE-2017-7474		 CWE-592 Low
No
No
 - 15.05.2017 SB2017051504


Showing elements 241 - 260 out of 255