Known vulnerabilities in Red Hat Single Sign-On - page 9

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 7.6.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU74182 - Improper Certificate Validation
CVE-2022-4492		 CWE-295 Medium
No
No
 7.6.3 30.03.2023 SB2023033003
SB2023033004
SB2023033005
and 13 more
#VU72323 - Improper Certificate Validation
CVE-2021-0341		 CWE-295 Medium
No
No
 7.6.3 16.02.2023 SB2023021628
SB2023051043
SB2023051044
and 14 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 7.6.3 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU72075 - Insecure Temporary File
CVE-2023-0482		 CWE-377 Low
No
No
 7.6.3 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 7.6.3 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 7.6.2 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 7.6.3 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 7.6.3 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 7.6.2 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU69673 - Out-of-bounds write
CVE-2022-40149		 CWE-787 Medium
No
No
 7.6.2 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 41 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 7.6.2 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 7.6.2 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750		 CWE-121 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 7.6.3 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751		 CWE-787 Medium
No
No
 7.6.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 7.6.2 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more


Showing elements 161 - 180 out of 255