Product by Red Hat
Red Hat 3scale API Management Platform 2
10 known vulnerabilities in Red Hat 3scale API Management Platform 2 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-49794 | Libxml: heap use after free (uaf) leads to denial of service (dos) | 9.1 | |
| High | CVE-2026-92925 | Redis: redis: out-of-bounds read via crafted cluster bus packets | 7.1 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| High | CVE-2023-0456 | Red Hat 3scale API Management Platform 2: Improper Authorization | 7.4 | |
| High | CVE-2024-10295 | Gateway: Incorrect Authorization | 7.5 | |
| High | CVE-2024-12125 | 3scale-porta: readonly fields not validated server-side | 7.5 | |
| Medium | CVE-2023-5349 | Draw while calling getdrawinfo() | 5.3 | |
| Medium | CVE-2024-0560 | APIcast: Improper Handling of Insufficient Permissions or Privileges | 6.3 | |
| Medium | CVE-2024-9671 | System: pdf invoices of the developer users can be seen if the url is known | 5.3 | |
| Medium | CVE-2023-4910 | 3scale-admin-portal: logged out users tokens can be accessed | 5.5 |