Known vulnerabilities in Red Hat Single Sign-On - page 6

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72727 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-2237		 CWE-601 Low
No
No
 7.6.2 02.03.2023 SB2023030258
SB2023030259
#VU72725 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-0264		 CWE-288 Medium
Available
No
 7.6.2 02.03.2023 SB2023030251
SB2023030253
SB2023030255
and 3 more
#VU72723 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-4137		 CWE-79 Medium
No
No
 7.6.2 02.03.2023 SB2023030250
SB2023030255
SB2023030256
and 2 more
#VU72075 - Insecure Temporary File
CVE-2023-0482		 CWE-377 Low
No
No
 7.6.3 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 7.6.2 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 7.6.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71139 - Improper Authorization
CVE-2023-0091		 CWE-285 Medium
No
No
 7.6.2 12.01.2023 SB2023011260
SB2023030253
SB2023030255
and 3 more
#VU71109 - Out-of-bounds write
CVE-2022-45693		 CWE-787 Medium
No
No
 7.6.2 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 7.6.3 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 7.6.2 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 7.6.2 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 7.6.2 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363		 CWE-200 Low
No
No
 7.6.2 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 7.6.2 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 7.6.2 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 7.6.2 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 7.6.2 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 7.6.2 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67663 - Out-of-bounds write
CVE-2022-38751		 CWE-787 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 7.6.2 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 101 - 120 out of 255