Known vulnerabilities in Service Interconnect - page 4

Vendor: Red Hat Inc.
Software: Service Interconnect
Software CPE: cpe:2.3:a:red_hat:service_interconnect:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 89
Public exploits: 9
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Service Interconnect Service Interconnect is affected by 89 known vulnerabilities: 17 high, 50 medium, 22 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 1.5.3 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 1.5.3 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU84985 - Out-of-bounds read
CVE-2023-7104		 CWE-125 Medium
No
No
 1.5.3, 1.5.4 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.5.3 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 1.5.3 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 1.5.3 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 1.5.3 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82922 - Permissions, Privileges, and Access Controls
CVE-2023-5056		 CWE-264 Low
No
No
 - 08.11.2023 SB2023110853
#VU82349 - Cryptographic Issues
CVE-2023-5363		 CWE-310 Low
No
No
 1.5.3 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 - 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU81044 - Out-of-bounds read
CVE-2023-39615		 CWE-125 Medium
No
No
 1.5.3 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU80575 - Improper input validation
CVE-2023-39322		 CWE-20 Medium
No
No
 1.5.3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321		 CWE-20 Medium
No
No
 1.5.3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 1.5.3 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 1.5.3 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 1.5.3 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 1.5.3 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 1.5.3 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 - 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 - 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more


Showing elements 61 - 80 out of 89