3scale Api Management Security Vulnerabilities and Issues — 3scale Api Management CVE List

Lucene search

Redhat3scale Api Management

3 matches found

CVE•added 2022/03/04 7:15 p.m.•308 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malici...

8.8CVSS8.6AI score0.0005EPSS

CVE•added 2022/10/19 6:15 p.m.•58 views

CVE-2022-1414

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

8.8CVSS8.6AI score0.00227EPSS

CVE•added 2021/05/26 12:15 p.m.•57 views

CVE-2019-14836

A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks.

8.8CVSS8.4AI score0.00304EPSS