Known vulnerabilities in Red Hat Single Sign-On - page 8

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70166 - Insufficient Session Expiration
CVE-2022-3916		 CWE-613 Low
No
No
 7.6.1, 7.6.2 13.12.2022 SB2022121340
SB2022121346
SB2022121348
and 7 more
#VU68867 - Improper input validation
CVE-2022-0839		 CWE-20 Low
No
No
 7.6.0 01.11.2022 SB2022110114
SB2022121929
SB2022121930
and 3 more
#VU67936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0225		 CWE-79 Low
No
No
 7.5.3, 7.6.1 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 6 more
#VU67935 - Permissions, Privileges, and Access Controls
CVE-2022-2668		 CWE-264 Low
No
No
 7.5.3, 7.6.1 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 5 more
#VU67933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-2256		 CWE-79 Low
No
No
 7.5.3 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 2 more
#VU64037 - Incorrect Authorization
CVE-2022-0866		 CWE-863 Low
No
No
 7.5.3, 7.6.1 07.06.2022 SB2022060718
SB2022060838
SB2022100530
and 6 more
#VU63159 - Allocation of Resources Without Limits or Throttling
CVE-2022-0084		 CWE-770 Low
No
No
 7.5.3, 7.6.1 13.05.2022 SB2022051310
SB2022051311
SB2022060838
and 12 more
#VU62795 - Missing Authorization
CVE-2022-1245		 CWE-862 Medium
No
No
 - 04.05.2022 SB2022050415
SB2022050431
SB2022050432
#VU61937 - Deserialization of Untrusted Data
CVE-2021-42392		 CWE-502 Critical
Available
No
 7.5.3, 7.6.1 06.04.2022 SB2022040617
SB2022040619
SB2022042257
and 10 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 7.5.3, 7.6.1 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 7.5.3, 7.6.1 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59722 - Improper input validation
CVE-2022-21360		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59723 - Improper input validation
CVE-2022-21365		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 94 more
#VU59724 - Improper input validation
CVE-2022-21366		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 40 more
#VU59727 - Improper input validation
CVE-2022-21299		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 105 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 7.4.10, 7.5.1 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 7.5.2 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 7.4.10, 7.5.1 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more


Showing elements 141 - 160 out of 255