Known vulnerabilities in Red Hat Single Sign-On - page 8

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.6.6 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU79114 - Resource exhaustion
CVE-2023-3223		 CWE-400 Medium
No
No
 7.6.5 08.08.2023 SB2023080810
SB2023080815
SB2023080816
and 12 more
#VU78469 - Improper Enforcement of Behavioral Workflow
CVE-2023-0105		 CWE-841 Medium
No
No
 7.6.6 20.07.2023 SB2023072091
SB2023112738
SB2024020217
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 7.6.6 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77767 - Authentication Bypass by Spoofing
CVE-2023-2585		 CWE-290 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 3 more
#VU77766 - Improper Certificate Validation
CVE-2023-2422		 CWE-295 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 2 more
#VU77752 - Improper Certificate Validation
CVE-2023-1664		 CWE-295 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 4 more
#VU77750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-4361		 CWE-79 Medium
No
No
 7.6.4 28.06.2023 SB2023062807
SB2023062847
SB2023062848
and 2 more
#VU77641 - Use After Free
CVE-2023-34241		 CWE-416 Medium
No
No
 7.6.6 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU76761 - Heap-based Buffer Overflow
CVE-2023-32324		 CWE-122 Medium
No
No
 7.6.6 01.06.2023 SB2023060132
SB2023060133
SB2023060136
and 33 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 7.6.5 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108		 CWE-835 Medium
No
No
 7.6.4 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 7.6.4 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU68867 - Improper input validation
CVE-2022-0839		 CWE-20 Low
No
No
 7.6.0 01.11.2022 SB2022110114
SB2022121929
SB2022121930
and 3 more
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144		 CWE-94 Critical
Available
Exploited
 7.6.4 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 7.6.5 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 141 - 160 out of 255