Known vulnerabilities in Red Hat Single Sign-On - page 13

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59892 - Authentication Bypass Using an Alternate Path or Channel
CVE-2021-3827		 CWE-288 Medium
No
No
 7.5.1 20.01.2022 SB2022012031
SB2022012032
#VU49112 - Permissions, Privileges, and Access Controls
CVE-2020-27826		 CWE-264 Medium
No
No
 7.4.4 21.12.2020 SB2020122130
SB2020122206
#VU49114 - Server-Side Request Forgery (SSRF)
CVE-2020-10770		 CWE-918 Medium
Available
No
 7.4.5 15.12.2020 SB2020122131
SB2021020313
SB2021020314
and 1 more
#VU23380 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14837		 CWE-200 Medium
No
No
 7.3.5 04.12.2019 SB2019120402
SB2019120403
SB2019120404
and 2 more
#VU23017 - Improper Authorization
CVE-2019-14843		 CWE-285 Low
No
No
 7.3.5 27.11.2019 SB2019100723
SB2019100724
SB2019100823
and 8 more
#VU23014 - Permissions, Privileges, and Access Controls
CVE-2019-14838		 CWE-264 Low
No
No
 7.3.5 27.11.2019 SB2019101415
SB2019112708
SB2019112709
and 8 more
#VU20337 - Resource Management Errors
CVE-2019-9515		 CWE-399 Medium
No
No
 7.3.5 20.08.2019 SB2019082005
SB2019082402
SB2019091011
and 39 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 7.3.5 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 7.3.5 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more
#VU16030 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-14658		 CWE-601 Low
No
No
 - 23.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16029 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14657		 CWE-200 Low
No
No
 - 23.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16028 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14655		 CWE-79 Low
No
No
 - 23.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16027 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10894		 CWE-200 Low
No
No
 - 13.11.2018 SB2018112305
SB2018112306
SB2018112307
#VU16031 - Memory corruption
CVE-2018-14627		 CWE-119 Low
No
No
 - 13.11.2018 SB2018112307
SB2018110822
SB2018110823
#VU6547 - Authentication Bypass Issues
CVE-2017-7474		 CWE-592 Low
No
No
 - 15.05.2017 SB2017051504


Showing elements 241 - 260 out of 255