Redhat 3scale vulnerabilities

• js-cookie javascript cookie, js-cookie, red hat cryostat 4 on rhel 9 +24 more +26 more JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVE-2026-46625 Fix available 7.5 HighMay 21, 2026
• immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable CVE-2026-29063 Fix available 8.7 HighMarch 4, 2026
• red hat 3scale api management platform 2, redhat 3scale api management +1 more Gateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a request CVE-2024-10295 7.5 HighOctober 24, 2024
• red hat 3scale api management platform 2, redhat 3scale api management platform +1 more System: pdf invoices of the developer users can be seen if the url is known CVE-2024-9671 5.3 MediumOctober 9, 2024
• redhat 3scale, red hat 3scale api management platform 2 +1 more Apicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versions CVE-2024-0560 6.3 MediumFebruary 28, 2024
• red hat 3scale api management platform 2, redhat 3scale api management +1 more 3scale-admin-portal: logged out users tokens can be accessed CVE-2023-4910 5.5 MediumNovember 6, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat 3scale api management 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields.... CVE-2022-1414 8.8 HighOctober 19, 2022
• redhat 3scale It was found that 3scale's APIdocs does not validate the access token, in the case of invalid... CVE-2021-3814 7.5 HighMarch 25, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• debian linux, linux kernel, fedoraproject fedora +16 more +18 more A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls... CVE-2021-3752 Fix available 7.1 HighSeptember 17, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker... CVE-2021-3609 Fix available 7.0 HighJune 21, 2021
• redhat 3scale api management A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an... CVE-2020-14388 6.3 MediumJune 2, 2021
• redhat 3scale, 3scale api management +1 more It was found that all versions of 3Scale developer portal lacked brute force protections. An... CVE-2021-3412 7.3 HighJune 1, 2021
• redhat 3scale, 3scale api management +1 more A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials.... CVE-2020-25634 5.4 MediumMay 26, 2021
• redhat 3scale 3scale dev portal login form does not verify CSRF token, and so does not protect against login CSRF. CVE-2019-14836 8.8 HighMay 26, 2021
• redhat 3scale api management A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could... CVE-2019-14852 7.5 HighMarch 18, 2021
• redhat 3scale api management A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform... CVE-2021-20252 6.5 MediumFebruary 23, 2021
• debian linux, linux kernel, canonical ubuntu linux +8 more +10 more CVE-2020-10711 does not affect BellSoft software CVE-2020-10711 Fix available 5.9 MediumMay 12, 2020
• redhat 3scale A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the... CVE-2019-14849 4.6 MediumDecember 12, 2019
• artifex ghostscript, redhat 3scale api management, enterprise linux +6 more +8 more It was found that the .buildfont1 procedure did not properly secure its privileged calls,... CVE-2019-10216 Fix available 7.3 HighAugust 12, 2019
• redhat 3scale api management platform Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation... CVE-2017-7512 9.8 CriticalJuly 7, 2017