Known vulnerabilities in Red Hat Single Sign-On - page 7

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72726 - Configuration
CVE-2022-4039		 CWE-16 High
No
No
 7.6.2 02.03.2023 SB2023030253
#VU72724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1438		 CWE-79 Low
No
No
 7.6.2 02.03.2023 SB2023030250
SB2023030253
SB2023030255
and 3 more
#VU72722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1274		 CWE-79 Low
No
No
 7.6.2 02.03.2023 SB2023030250
SB2023030253
SB2023030255
and 3 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 7.6.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 7.6.2 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3782		 CWE-22 Medium
No
No
 7.6.1, 7.6.2 13.12.2022 SB2022121342
SB2022121346
SB2022121348
and 14 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 7.6.2 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU69919 - Resource Management Errors
CVE-2022-2764		 CWE-399 Medium
No
No
 7.6.2 06.12.2022 SB2022120605
SB2022120615
SB2022120616
and 7 more
#VU69673 - Out-of-bounds write
CVE-2022-40149		 CWE-787 Medium
No
No
 7.6.2 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 41 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750		 CWE-121 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 7.6.2 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 7.6.2 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 53 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 7.6.2 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU55102 - Resource exhaustion
CVE-2021-35065		 CWE-400 Medium
No
No
 7.6.2 21.07.2021 SB2021072101
SB2023020668
SB2023020971
and 24 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 7.6.2 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 7.6.2 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 7.6.2 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 7.6.2 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more


Showing elements 121 - 140 out of 255