Known vulnerabilities in Red Hat Single Sign-On - page 5

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77767 - Authentication Bypass by Spoofing
CVE-2023-2585		 CWE-290 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 3 more
#VU77766 - Improper Certificate Validation
CVE-2023-2422		 CWE-295 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 2 more
#VU77752 - Improper Certificate Validation
CVE-2023-1664		 CWE-295 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 4 more
#VU77750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-4361		 CWE-79 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 2 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU74182 - Improper Certificate Validation
CVE-2022-4492		 CWE-295 Medium
No
No
 7.6.3 30.03.2023 SB2023033003
SB2023033004
SB2023033005
and 13 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108		 CWE-835 Medium
No
No
 7.6.4 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 7.6.4 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72323 - Improper Certificate Validation
CVE-2021-0341		 CWE-295 Medium
No
No
 7.6.3 16.02.2023 SB2023021628
SB2023051043
SB2023051044
and 14 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 7.6.3 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 7.6.3 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 7.6.3 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144		 CWE-94 Critical
Available
Exploited
 7.6.4 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 7.6.3 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more


Showing elements 81 - 100 out of 255