Redhat 3scale Api Management vulnerabilities

• js-cookie javascript cookie, js-cookie, red hat cryostat 4 on rhel 9 +24 more +26 more JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVE-2026-46625 Fix available 7.5 HighMay 21, 2026
• immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable CVE-2026-29063 Fix available 8.7 HighMarch 4, 2026
• red hat 3scale api management platform 2, redhat 3scale api management +1 more Gateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a request CVE-2024-10295 7.5 HighOctober 24, 2024
• red hat 3scale api management platform 2, redhat 3scale api management platform +1 more System: pdf invoices of the developer users can be seen if the url is known CVE-2024-9671 5.3 MediumOctober 9, 2024
• red hat 3scale api management platform 2, redhat 3scale api management +1 more 3scale-admin-portal: logged out users tokens can be accessed CVE-2023-4910 5.5 MediumNovember 6, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat 3scale api management 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields.... CVE-2022-1414 8.8 HighOctober 19, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker... CVE-2021-3609 Fix available 7.0 HighJune 21, 2021
• redhat 3scale api management A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an... CVE-2020-14388 6.3 MediumJune 2, 2021
• redhat 3scale, 3scale api management +1 more It was found that all versions of 3Scale developer portal lacked brute force protections. An... CVE-2021-3412 7.3 HighJune 1, 2021
• redhat 3scale, 3scale api management +1 more A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials.... CVE-2020-25634 5.4 MediumMay 26, 2021
• redhat 3scale api management A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could... CVE-2019-14852 7.5 HighMarch 18, 2021
• redhat 3scale api management A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform... CVE-2021-20252 6.5 MediumFebruary 23, 2021
• artifex ghostscript, redhat 3scale api management, enterprise linux +6 more +8 more It was found that the .buildfont1 procedure did not properly secure its privileged calls,... CVE-2019-10216 Fix available 7.3 HighAugust 12, 2019
• redhat 3scale api management platform Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation... CVE-2017-7512 9.8 CriticalJuly 7, 2017