Product by Red Hat
Red Hat 3scale API Management
13 known vulnerabilities in Red Hat 3scale API Management (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-10216 | Ghostscript: Incorrect Use of Privileged APIs | 7.3 | |
| High | CVE-2026-46625 | JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection | 7.5 | |
| High | CVE-2022-1414 | 3scale-amp-system: Improper Use of Validation Framework | 8.8 | |
| High | CVE-2021-3656 | KVM: Missing Authorization | 8.8 | |
| Medium | CVE-2021-20252 | 3scale/backend: Improper Input Validation | 6.5 | |
| High | CVE-2021-3412 | 3Scale: Improper Restriction of Excessive Authentication Attempts | 7.3 | |
| High | CVE-2024-10295 | Gateway: Incorrect Authorization | 7.5 | |
| Medium | CVE-2020-14388 | Red Hat 3scale API Management: Improper Access Control | 6.3 | |
| High | CVE-2019-14852 | Apicast: Use of a Broken or Risky Cryptographic Algorithm | 7.5 | |
| High | CVE-2022-0330 | Kernel: Improper Preservation of Permissions | 7.8 | |
| High | CVE-2021-3609 | Kernel: Race Condition | 7.0 | |
| Medium | CVE-2020-25634 | 3scale-system: Improper Access Control | 5.4 | |
| Medium | CVE-2023-4910 | 3scale-admin-portal: logged out users tokens can be accessed | 5.5 |