Redhat 3scale Api Management — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat 3scale Api Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2021-3656 — CVSS 8.8 (high): A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine…
• CVE-2022-1414 — CVSS 8.8 (high): 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw…
• CVE-2022-0330 — CVSS 7.8 (high): A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code…
• CVE-2019-10216 — CVSS 7.8 (high): In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass…
• CVE-2024-10295 — CVSS 7.5 (high): A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a…
• CVE-2019-14852 — CVSS 7.5 (high): A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker…
• CVE-2021-3412 — CVSS 7.3 (high): It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login…
• CVE-2021-3609 — CVSS 7.0 (high): .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to…
• CVE-2021-20252 — CVSS 6.5 (medium): A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested…
• CVE-2020-14388 — CVSS 6.3 (medium): A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly…
• CVE-2023-4910 — CVSS 5.5 (medium): A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser…
• CVE-2020-25634 — CVSS 5.4 (medium): A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view…