Known vulnerabilities in Red Hat Single Sign-On - page 9

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60243 - Resource Management Errors
CVE-2021-3859		 CWE-399 Medium
No
No
 7.4.10, 7.5.1 02.02.2022 SB2022020210
SB2022020326
SB2022020327
and 4 more
#VU59892 - Authentication Bypass Using an Alternate Path or Channel
CVE-2021-3827		 CWE-288 Medium
No
No
 7.5.1 20.01.2022 SB2022012031
SB2022012032
#VU59719 - Improper input validation
CVE-2022-21291		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 67 more
#VU59720 - Improper input validation
CVE-2022-21305		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 85 more
#VU59721 - Improper input validation
CVE-2022-21277		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 41 more
#VU59725 - Improper input validation
CVE-2022-21282		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 65 more
#VU59726 - Improper input validation
CVE-2022-21296		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 65 more
#VU59729 - Improper input validation
CVE-2022-21283		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 58 more
#VU59730 - Improper input validation
CVE-2022-21293		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU59731 - Improper input validation
CVE-2022-21294		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59732 - Improper input validation
CVE-2022-21340		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59733 - Improper input validation
CVE-2022-21341		 CWE-20 Medium
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59734 - Improper input validation
CVE-2022-21248		 CWE-20 Low
No
No
 7.4.10, 7.5.1 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU59661 - Observable discrepancy
CVE-2021-3642		 CWE-203 Low
No
No
 7.4.10 17.01.2022 SB2021080530
SB2022080830
SB2021121543
and 1 more
#VU59083 - Improper Access Control
CVE-2021-4133		 CWE-284 Low
No
No
 7.5.0, 7.5.1 22.12.2021 SB2021122206
SB2022012032
SB2022122807
and 2 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 7.4.10, 7.5.1 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU58178 - Files or Directories Accessible to External Parties
CVE-2021-3717		 CWE-552 Low
No
No
 7.4.10 16.11.2021 SB2021111608
SB2021111715
SB2022080830
and 3 more
#VU58177 - Resource exhaustion
CVE-2021-3629		 CWE-400 Medium
No
No
 7.4.10 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 7.4.10 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56965 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20289		 CWE-200 Low
No
No
 7.4.10, 7.5.1 30.09.2021 SB2021093015
SB2021093016
SB2021111715
and 5 more


Showing elements 161 - 180 out of 255