Known vulnerabilities in Red Hat Single Sign-On - page 2

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59717 - Improper input validation
CVE-2019-10219		 CWE-20 Medium
No
No
 7.3.6 18.01.2022 SB2022011837
SB2022070611
SB2022083134
and 4 more
#VU26053 - Cryptographic Issues
CVE-2019-14887		 CWE-310 Low
No
No
 7.3.7 13.03.2020 SB2020031304
SB2020031305
SB2020032330
#VU25834 - Deserialization of Untrusted Data
CVE-2019-14893		 CWE-502 High
No
No
 7.3.6 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 15 more
#VU25833 - Deserialization of Untrusted Data
CVE-2019-14892		 CWE-502 High
No
No
 7.3.6 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 16 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 7.3.7 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 34 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 7.3.7 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 37 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 7.3.7 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 17 more
#VU30430 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14885		 CWE-200 Low
No
No
 7.3.7 23.01.2020 SB2020012316
SB2020032330
#VU24272 - Improper Access Control
CVE-2019-20330		 CWE-284 Low
No
No
 7.3.7 14.01.2020 SB2020010309
SB2020032709
SB2020042101
and 18 more
#VU22876 - Improper input validation
CVE-2013-7285		 CWE-20 High
Available
No
 7.3.6 20.11.2019 SB2019072308
SB2019112016
SB2016121356
and 7 more
#VU22875 - Deserialization of Untrusted Data
CVE-2019-10173		 CWE-502 High
No
No
 7.3.6 20.11.2019 SB2019072308
SB2019112016
SB2019121922
and 11 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 7.3.6 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 31 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 7.3.6 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU21594 - Improper input validation
CVE-2019-17267		 CWE-20 Medium
No
No
 7.3.6 07.10.2019 SB2019100710
SB2019102422
SB2019120206
and 19 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 7.3.6 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21580 - Improper input validation
CVE-2019-16942		 CWE-20 Medium
No
No
 7.3.6 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU21136 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16335		 CWE-200 Medium
No
No
 7.3.6 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 21 more
#VU21135 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14540		 CWE-200 Medium
Available
No
 7.3.6 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 23 more
#VU20413 - Improper Authentication
CVE-2019-10201		 CWE-287 High
No
No
 7.3.3 27.08.2019 SB2019081436
SB2020072802
SB2019081386
#VU20410 - Cross-Site Request Forgery (CSRF)
CVE-2019-10199		 CWE-352 Low
No
No
 7.3.3 27.08.2019 SB2019081435
SB2019081386


Showing elements 21 - 40 out of 255