Known vulnerabilities in Red Hat Single Sign-On - page 4

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97622 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-8883		 CWE-601 Low
No
No
 7.6.11 20.09.2024 SB2024092009
SB2024092069
SB2024092070
and 12 more
#VU97621 - Improper Verification of Cryptographic Signature
CVE-2024-8698		 CWE-347 Medium
Available
No
 7.6.11 20.09.2024 SB2024092009
SB2024092069
SB2024092070
and 11 more
#VU97468 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-4629		 CWE-307 Medium
No
No
 7.6.10 18.09.2024 SB2024091823
SB2024092059
SB2024092060
and 5 more
#VU97432 - Session Fixation
CVE-2024-7341		 CWE-384 Medium
No
No
 7.6.10 17.09.2024 SB2024091740
SB2024092059
SB2024092060
and 9 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 7.6.10 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94711 - Resource exhaustion
CVE-2024-1975		 CWE-400 Medium
No
No
 7.6.10 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737		 CWE-399 Medium
No
No
 7.6.10 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU93095 - Exposure of sensitive information to an unauthorized actor
CVE-2024-5967		 CWE-200 Low
No
No
 7.6.10 24.06.2024 SB2024062410
SB2024092059
SB2024092060
and 5 more
#VU93088 - Exposure of sensitive information to an unauthorized actor
CVE-2024-4540		 CWE-200 Low
No
No
 7.6.9 24.06.2024 SB2024062409
SB2024092061
SB2024092074
and 8 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 7.6.10 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 7.4.7 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 27 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 7.4.7 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 43 more
#VU51521 - Improper input validation
CVE-2020-35510		 CWE-20 Medium
No
No
 7.4.6 17.03.2021 SB2021031705
SB2021031707
SB2021032323
and 3 more
#VU51520 - Improper Access Control
CVE-2021-20250		 CWE-284 Medium
No
No
 7.4.6 17.03.2021 SB2021031704
SB2021031707
SB2021032323
and 1 more
#VU51518 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-20220		 CWE-444 Medium
No
No
 7.4.6 17.03.2021 SB2021031703
SB2021031707
SB2021032323
#VU51516 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10687		 CWE-444 Medium
No
No
 7.4.6 17.03.2021 SB2020092345
SB2021031707
SB2021032323
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 7.4.6 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU49113 - Authentication Bypass by Capture-replay
CVE-2020-14302		 CWE-294 Medium
No
No
 7.4.6 15.12.2020 SB2020122131
SB2021032320
SB2021032321
and 2 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 7.4.6 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 7.4.6 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more


Showing elements 61 - 80 out of 255