Known vulnerabilities in Red Hat Single Sign-On - page 4

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84615 - Resource exhaustion
CVE-2023-6563		 CWE-400 Medium
No
No
 7.6.6 20.12.2023 SB2023122039
SB2023122143
SB2023122144
and 3 more
#VU84614 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-6291		 CWE-601 Low
No
No
 7.6.6, 7.6.7 20.12.2023 SB2023122038
SB2023122143
SB2023122144
and 7 more
#VU84532 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6134		 CWE-79 Low
No
No
 7.6.6, 7.6.7 19.12.2023 SB2023121901
SB2023122143
SB2023122144
and 7 more
#VU83304 - Reachable Assertion
CVE-2023-38473		 CWE-617 Low
No
No
 7.6.6 20.11.2023 SB2023112056
SB2023112057
SB2023112113
and 32 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.6.6 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 7.6.6 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79561 - Out-of-bounds write
CVE-2023-4016		 CWE-787 High
No
No
 7.6.6 15.08.2023 SB2023081548
SB20230821203
SB2023082925
and 49 more
#VU79114 - Resource exhaustion
CVE-2023-3223		 CWE-400 Medium
No
No
 7.6.5 08.08.2023 SB2023080810
SB2023080815
SB2023080816
and 12 more
#VU78469 - Improper Enforcement of Behavioral Workflow
CVE-2023-0105		 CWE-841 Medium
No
No
 7.6.6 20.07.2023 SB2023072091
SB2023112738
SB2024020217
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 7.6.6 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77641 - Use After Free
CVE-2023-34241		 CWE-416 Medium
No
No
 7.6.6 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU77450 - Out-of-bounds write
CVE-2023-3138		 CWE-787 Medium
No
No
 7.6.6 15.06.2023 SB2023061549
SB2023061554
SB2023061556
and 45 more
#VU76761 - Heap-based Buffer Overflow
CVE-2023-32324		 CWE-122 Medium
No
No
 7.6.6 01.06.2023 SB2023060132
SB2023060133
SB2023060136
and 33 more
#VU75606 - Improper Certificate Validation
CVE-2023-31486		 CWE-295 Medium
No
No
 7.6.6 01.05.2023 SB2023050118
SB2023070339
SB2023101769
and 46 more
#VU75482 - Integer overflow
CVE-2022-48468		 CWE-190 High
No
No
 7.6.6 25.04.2023 SB2022072825
SB2023042551
SB2023050992
and 50 more
#VU75444 - Improper input validation
CVE-2023-1981		 CWE-20 Low
No
No
 7.6.6 24.04.2023 SB2023042420
SB2023042421
SB2023042548
and 23 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 7.6.5 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 7.6.6 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 7.6.6 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 7.6.5 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 61 - 80 out of 255