CVE-2023-44487

CVE Enrichment

CVSS: 7.5 HIGH
EPSS: 100.00%
EPSS Percentile: 100.00%
CISA KEV: YES — Known Exploited Vulnerability

Description

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 10-Oct-2023 21:15
Last Modified: 12-Aug-2026 02:37
EPSS Date: 2026-10-23
CWE: CWE-400

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:N /
                            I:N /
                            A:H

CISA KEV Details

Date Added: 2023-10-10
Remediation Due: 2023-10-31
Known Ransomware Campaign Use: Unknown
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/; https://nvd.nist.gov/vuln/detail/CVE-2023-44487

Affected Products / Versions

siemens / simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware
Version / affected range: * · from (inclusive) 3.1.5
cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:*
siemens / sinec_ins
Version / affected range: * · before (exclusive) 1.0
cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
siemens / sinec_ins
Version / affected range: 1.0
cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
siemens / sinec_ins
Version / affected range: 1.0
cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*
siemens / sinec_ins
Version / affected range: 1.0
cpe:2.3:a:siemens:sinec_ins:1.0:sp2:*:*:*:*:*:*
siemens / sinec_ins
Version / affected range: 1.0
cpe:2.3:a:siemens:sinec_ins:1.0:sp2_update_1:*:*:*:*:*:*
siemens / sinec_ins
Version / affected range: 1.0
cpe:2.3:a:siemens:sinec_ins:1.0:sp2_update_2:*:*:*:*:*:*
siemens / sinec_nms
Version / affected range: * · before (exclusive) 3.0
cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*
siemens / st7_scadaconnect
Version / affected range: * · before (exclusive) 1.1
cpe:2.3:a:siemens:st7_scadaconnect:*:*:*:*:*:*:*:*
siemens / ruggedcom_ape1808_firmware
Version / affected range: -
cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
siemens / simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware
Version / affected range: * · from (inclusive) 3.1.5
cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:*
siemens / siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware
Version / affected range: * · from (inclusive) 3.1.5
cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:*
ietf / http
Version / affected range: 2.0
cpe:2.3:a:ietf:http:2.0:*:*:*:*:*:*:*
nghttp2 / nghttp2
Version / affected range: * · before (exclusive) 1.57.0
cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:*
netty / netty
Version / affected range: * · before (exclusive) 4.1.100
cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*
envoyproxy / envoy
Version / affected range: 1.24.10
cpe:2.3:a:envoyproxy:envoy:1.24.10:*:*:*:*:*:*:*
envoyproxy / envoy
Version / affected range: 1.25.9
cpe:2.3:a:envoyproxy:envoy:1.25.9:*:*:*:*:*:*:*
envoyproxy / envoy
Version / affected range: 1.26.4
cpe:2.3:a:envoyproxy:envoy:1.26.4:*:*:*:*:*:*:*
envoyproxy / envoy
Version / affected range: 1.27.0
cpe:2.3:a:envoyproxy:envoy:1.27.0:*:*:*:*:*:*:*
eclipse / jetty
Version / affected range: * · before (exclusive) 9.4.53
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
eclipse / jetty
Version / affected range: * · from (inclusive) 10.0.0 · before (exclusive) 10.0.17
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
eclipse / jetty
Version / affected range: * · from (inclusive) 11.0.0 · before (exclusive) 11.0.17
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
eclipse / jetty
Version / affected range: * · from (inclusive) 12.0.0 · before (exclusive) 12.0.2
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
caddyserver / caddy
Version / affected range: * · before (exclusive) 2.7.5
cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*
golang / go
Version / affected range: * · before (exclusive) 1.20.10
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
golang / go
Version / affected range: * · from (inclusive) 1.21.0 · before (exclusive) 1.21.3
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
golang / http2
Version / affected range: * · before (exclusive) 0.17.0
cpe:2.3:a:golang:http2:*:*:*:*:*:go:*:*
golang / networking
Version / affected range: * · before (exclusive) 0.17.0
cpe:2.3:a:golang:networking:*:*:*:*:*:go:*:*
f5 / big-ip_access_policy_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
f5 / big-ip_access_policy_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
f5 / big-ip_access_policy_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
f5 / big-ip_access_policy_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
f5 / big-ip_access_policy_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_advanced_firewall_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_firewall_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_firewall_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_firewall_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_firewall_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_advanced_web_application_firewall
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_web_application_firewall
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_web_application_firewall
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_web_application_firewall
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
f5 / big-ip_advanced_web_application_firewall
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_analytics
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5 / big-ip_analytics
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5 / big-ip_analytics
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5 / big-ip_analytics
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5 / big-ip_analytics
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_analytics:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_application_acceleration_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_acceleration_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_acceleration_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_acceleration_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_acceleration_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_application_acceleration_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_application_security_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_security_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_security_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_security_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
f5 / big-ip_application_security_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_application_security_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_application_visibility_and_reporting
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
f5 / big-ip_application_visibility_and_reporting
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
f5 / big-ip_application_visibility_and_reporting
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
f5 / big-ip_application_visibility_and_reporting
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
f5 / big-ip_application_visibility_and_reporting
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_carrier-grade_nat
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
f5 / big-ip_carrier-grade_nat
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
f5 / big-ip_carrier-grade_nat
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
f5 / big-ip_carrier-grade_nat
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
f5 / big-ip_carrier-grade_nat
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_carrier-grade_nat:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_ddos_hybrid_defender
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
f5 / big-ip_ddos_hybrid_defender
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
f5 / big-ip_ddos_hybrid_defender
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
f5 / big-ip_ddos_hybrid_defender
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
f5 / big-ip_ddos_hybrid_defender
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_domain_name_system
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
f5 / big-ip_domain_name_system
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
f5 / big-ip_domain_name_system
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
f5 / big-ip_domain_name_system
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
f5 / big-ip_domain_name_system
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_domain_name_system:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_fraud_protection_service
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
f5 / big-ip_fraud_protection_service
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
f5 / big-ip_fraud_protection_service
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
f5 / big-ip_fraud_protection_service
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
f5 / big-ip_fraud_protection_service
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_fraud_protection_service:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_global_traffic_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_global_traffic_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_global_traffic_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_global_traffic_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_global_traffic_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_global_traffic_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_link_controller
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
f5 / big-ip_link_controller
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
f5 / big-ip_link_controller
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
f5 / big-ip_link_controller
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
f5 / big-ip_link_controller
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_link_controller:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_local_traffic_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_local_traffic_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_local_traffic_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_local_traffic_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
f5 / big-ip_local_traffic_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_local_traffic_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_next
Version / affected range: 20.0.1
cpe:2.3:a:f5:big-ip_next:20.0.1:*:*:*:*:*:*:*
f5 / big-ip_next_service_proxy_for_kubernetes
Version / affected range: * · from (inclusive) 1.5.0 · through (inclusive) 1.8.2
cpe:2.3:a:f5:big-ip_next_service_proxy_for_kubernetes:*:*:*:*:*:*:*:*
f5 / big-ip_policy_enforcement_manager
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
f5 / big-ip_policy_enforcement_manager
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
f5 / big-ip_policy_enforcement_manager
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
f5 / big-ip_policy_enforcement_manager
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
f5 / big-ip_policy_enforcement_manager
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_ssl_orchestrator
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
f5 / big-ip_ssl_orchestrator
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
f5 / big-ip_ssl_orchestrator
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
f5 / big-ip_ssl_orchestrator
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
f5 / big-ip_ssl_orchestrator
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_ssl_orchestrator:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_webaccelerator
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
f5 / big-ip_webaccelerator
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
f5 / big-ip_webaccelerator
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
f5 / big-ip_webaccelerator
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
f5 / big-ip_webaccelerator
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_webaccelerator:17.1.0:*:*:*:*:*:*:*
f5 / big-ip_websafe
Version / affected range: * · from (inclusive) 13.1.0 · through (inclusive) 13.1.5
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
f5 / big-ip_websafe
Version / affected range: * · from (inclusive) 14.1.0 · through (inclusive) 14.1.5
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
f5 / big-ip_websafe
Version / affected range: * · from (inclusive) 15.1.0 · through (inclusive) 15.1.10
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
f5 / big-ip_websafe
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.1.4
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
f5 / big-ip_websafe
Version / affected range: 17.1.0
cpe:2.3:a:f5:big-ip_websafe:17.1.0:*:*:*:*:*:*:*
f5 / nginx
Version / affected range: * · from (inclusive) 1.9.5 · through (inclusive) 1.25.2
cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
f5 / nginx_ingress_controller
Version / affected range: * · from (inclusive) 2.0.0 · through (inclusive) 2.4.2
cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:*
f5 / nginx_ingress_controller
Version / affected range: * · from (inclusive) 3.0.0 · through (inclusive) 3.3.0
cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:*
f5 / nginx_plus
Version / affected range: * · from (inclusive) r25 · before (exclusive) r29
cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*
f5 / nginx_plus
Version / affected range: r29
cpe:2.3:a:f5:nginx_plus:r29:-:*:*:*:*:*:*
f5 / nginx_plus
Version / affected range: r30
cpe:2.3:a:f5:nginx_plus:r30:-:*:*:*:*:*:*
apache / tomcat
Version / affected range: * · from (inclusive) 8.5.0 · through (inclusive) 8.5.93
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
apache / tomcat
Version / affected range: * · from (inclusive) 9.0.0 · through (inclusive) 9.0.80
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
apache / tomcat
Version / affected range: * · from (inclusive) 10.1.0 · through (inclusive) 10.1.13
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone1:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone10:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone11:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone2:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone3:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone4:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone5:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone6:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone7:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone8:*:*:*:*:*:*
apache / tomcat
Version / affected range: 11.0.0
cpe:2.3:a:apache:tomcat:11.0.0:milestone9:*:*:*:*:*:*
apple / swiftnio_http\/2
Version / affected range: * · before (exclusive) 1.28.0
cpe:2.3:a:apple:swiftnio_http\/2:*:*:*:*:*:swift:*:*
grpc / grpc
Version / affected range: * · before (exclusive) 1.56.3
cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*
grpc / grpc
Version / affected range: * · through (inclusive) 1.59.2
cpe:2.3:a:grpc:grpc:*:*:*:*:*:-:*:*
grpc / grpc
Version / affected range: * · from (inclusive) 1.58.0 · before (exclusive) 1.58.3
cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*
grpc / grpc
Version / affected range: 1.57.0
cpe:2.3:a:grpc:grpc:1.57.0:-:*:*:*:go:*:*
microsoft / .net
Version / affected range: * · from (inclusive) 6.0.0 · before (exclusive) 6.0.23
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
microsoft / .net
Version / affected range: * · from (inclusive) 7.0.0 · before (exclusive) 7.0.12
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
microsoft / asp.net_core
Version / affected range: * · from (inclusive) 6.0.0 · before (exclusive) 6.0.23
cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
microsoft / asp.net_core
Version / affected range: * · from (inclusive) 7.0.0 · before (exclusive) 7.0.12
cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
microsoft / azure_kubernetes_service
Version / affected range: * · before (exclusive) 2023-10-08
cpe:2.3:a:microsoft:azure_kubernetes_service:*:*:*:*:*:*:*:*
microsoft / visual_studio_2022
Version / affected range: * · from (inclusive) 17.0 · before (exclusive) 17.2.20
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
microsoft / visual_studio_2022
Version / affected range: * · from (inclusive) 17.4 · before (exclusive) 17.4.12
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
microsoft / visual_studio_2022
Version / affected range: * · from (inclusive) 17.6 · before (exclusive) 17.6.8
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
microsoft / visual_studio_2022
Version / affected range: * · from (inclusive) 17.7 · before (exclusive) 17.7.5
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
microsoft / windows_10_1607
Version / affected range: * · before (exclusive) 10.0.14393.6351
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
microsoft / windows_10_1607
Version / affected range: * · before (exclusive) 10.0.14393.6351
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
microsoft / windows_10_1809
Version / affected range: * · before (exclusive) 10.0.17763.4974
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoft / windows_10_21h2
Version / affected range: * · before (exclusive) 10.0.19044.3570
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoft / windows_10_22h2
Version / affected range: * · before (exclusive) 10.0.19045.3570
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoft / windows_11_21h2
Version / affected range: * · before (exclusive) 10.0.22000.2538
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoft / windows_11_22h2
Version / affected range: * · before (exclusive) 10.0.22621.2428
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoft / windows_server_2016
Version / affected range: -
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
microsoft / windows_server_2019
Version / affected range: -
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
microsoft / windows_server_2022
Version / affected range: -
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
nodejs / node.js
Version / affected range: * · from (inclusive) 18.0.0 · before (exclusive) 18.18.2
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
nodejs / node.js
Version / affected range: * · from (inclusive) 20.0.0 · before (exclusive) 20.8.1
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
microsoft / cbl-mariner
Version / affected range: * · before (exclusive) 2023-10-11
cpe:2.3:a:microsoft:cbl-mariner:*:*:*:*:*:*:*:*
dena / h2o
Version / affected range: * · before (exclusive) 2023-10-10
cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*
facebook / proxygen
Version / affected range: * · before (exclusive) 2023.10.16.00
cpe:2.3:a:facebook:proxygen:*:*:*:*:*:*:*:*
apache / apisix
Version / affected range: * · before (exclusive) 3.6.1
cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*
apache / traffic_server
Version / affected range: * · from (inclusive) 8.0.0 · before (exclusive) 8.1.9
cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
apache / traffic_server
Version / affected range: * · from (inclusive) 9.0.0 · before (exclusive) 9.2.3
cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
amazon / opensearch_data_prepper
Version / affected range: * · before (exclusive) 2.5.0
cpe:2.3:a:amazon:opensearch_data_prepper:*:*:*:*:*:*:*:*
debian / debian_linux
Version / affected range: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
debian / debian_linux
Version / affected range: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
debian / debian_linux
Version / affected range: 12.0
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
kazu-yamamoto / http2
Version / affected range: * · before (exclusive) 4.2.2
cpe:2.3:a:kazu-yamamoto:http2:*:*:*:*:*:*:*:*
istio / istio
Version / affected range: * · before (exclusive) 1.17.6
cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
istio / istio
Version / affected range: * · from (inclusive) 1.18.0 · before (exclusive) 1.18.3
cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
istio / istio
Version / affected range: * · from (inclusive) 1.19.0 · before (exclusive) 1.19.1
cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
varnish_cache_project / varnish_cache
Version / affected range: * · before (exclusive) 2023-10-10
cpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
traefik / traefik
Version / affected range: * · before (exclusive) 2.10.5
cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*
traefik / traefik
Version / affected range: 3.0.0
cpe:2.3:a:traefik:traefik:3.0.0:beta1:*:*:*:*:*:*
traefik / traefik
Version / affected range: 3.0.0
cpe:2.3:a:traefik:traefik:3.0.0:beta2:*:*:*:*:*:*
traefik / traefik
Version / affected range: 3.0.0
cpe:2.3:a:traefik:traefik:3.0.0:beta3:*:*:*:*:*:*
projectcontour / contour
Version / affected range: * · before (exclusive) 2023-10-11
cpe:2.3:a:projectcontour:contour:*:*:*:*:*:kubernetes:*:*
linkerd / linkerd
Version / affected range: * · from (inclusive) 2.12.0 · through (inclusive) 2.12.5
cpe:2.3:a:linkerd:linkerd:*:*:*:*:stable:kubernetes:*:*
linkerd / linkerd
Version / affected range: 2.13.0
cpe:2.3:a:linkerd:linkerd:2.13.0:*:*:*:stable:kubernetes:*:*
linkerd / linkerd
Version / affected range: 2.13.1
cpe:2.3:a:linkerd:linkerd:2.13.1:*:*:*:stable:kubernetes:*:*
linkerd / linkerd
Version / affected range: 2.14.0
cpe:2.3:a:linkerd:linkerd:2.14.0:*:*:*:stable:kubernetes:*:*
linkerd / linkerd
Version / affected range: 2.14.1
cpe:2.3:a:linkerd:linkerd:2.14.1:*:*:*:stable:kubernetes:*:*
linecorp / armeria
Version / affected range: * · before (exclusive) 1.26.0
cpe:2.3:a:linecorp:armeria:*:*:*:*:*:*:*:*
redhat / 3scale_api_management_platform
Version / affected range: 2.0
cpe:2.3:a:redhat:3scale_api_management_platform:2.0:*:*:*:*:*:*:*
redhat / advanced_cluster_management_for_kubernetes
Version / affected range: 2.0
cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.0:*:*:*:*:*:*:*
redhat / advanced_cluster_security
Version / affected range: 3.0
cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*
redhat / advanced_cluster_security
Version / affected range: 4.0
cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*
redhat / ansible_automation_platform
Version / affected range: 2.0
cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*
redhat / build_of_optaplanner
Version / affected range: 8.0
cpe:2.3:a:redhat:build_of_optaplanner:8.0:*:*:*:*:*:*:*
redhat / build_of_quarkus
Version / affected range: -
cpe:2.3:a:redhat:build_of_quarkus:-:*:*:*:*:*:*:*
redhat / ceph_storage
Version / affected range: 5.0
cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*
redhat / cert-manager_operator_for_red_hat_openshift
Version / affected range: -
cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*
redhat / certification_for_red_hat_enterprise_linux
Version / affected range: 8.0
cpe:2.3:a:redhat:certification_for_red_hat_enterprise_linux:8.0:*:*:*:*:*:*:*
redhat / certification_for_red_hat_enterprise_linux
Version / affected range: 9.0
cpe:2.3:a:redhat:certification_for_red_hat_enterprise_linux:9.0:*:*:*:*:*:*:*
redhat / cost_management
Version / affected range: -
cpe:2.3:a:redhat:cost_management:-:*:*:*:*:*:*:*
redhat / cryostat
Version / affected range: 2.0
cpe:2.3:a:redhat:cryostat:2.0:*:*:*:*:*:*:*
redhat / decision_manager
Version / affected range: 7.0
cpe:2.3:a:redhat:decision_manager:7.0:*:*:*:*:*:*:*
redhat / fence_agents_remediation_operator
Version / affected range: -
cpe:2.3:a:redhat:fence_agents_remediation_operator:-:*:*:*:*:*:*:*
redhat / integration_camel_for_spring_boot
Version / affected range: -
cpe:2.3:a:redhat:integration_camel_for_spring_boot:-:*:*:*:*:*:*:*
redhat / integration_camel_k
Version / affected range: -
cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*
redhat / integration_service_registry
Version / affected range: -
cpe:2.3:a:redhat:integration_service_registry:-:*:*:*:*:*:*:*
redhat / jboss_a-mq
Version / affected range: 7
cpe:2.3:a:redhat:jboss_a-mq:7:*:*:*:*:*:*:*
redhat / jboss_a-mq_streams
Version / affected range: -
cpe:2.3:a:redhat:jboss_a-mq_streams:-:*:*:*:*:*:*:*
redhat / jboss_core_services
Version / affected range: -
cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*
redhat / jboss_data_grid
Version / affected range: 7.0.0
cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*
redhat / jboss_enterprise_application_platform
Version / affected range: 6.0.0
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
redhat / jboss_enterprise_application_platform
Version / affected range: 7.0.0
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
redhat / jboss_fuse
Version / affected range: 6.0.0
cpe:2.3:a:redhat:jboss_fuse:6.0.0:*:*:*:*:*:*:*
redhat / jboss_fuse
Version / affected range: 7.0.0
cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*
redhat / logging_subsystem_for_red_hat_openshift
Version / affected range: -
cpe:2.3:a:redhat:logging_subsystem_for_red_hat_openshift:-:*:*:*:*:*:*:*
redhat / machine_deletion_remediation_operator
Version / affected range: -
cpe:2.3:a:redhat:machine_deletion_remediation_operator:-:*:*:*:*:*:*:*
redhat / migration_toolkit_for_applications
Version / affected range: 6.0
cpe:2.3:a:redhat:migration_toolkit_for_applications:6.0:*:*:*:*:*:*:*
redhat / migration_toolkit_for_containers
Version / affected range: -
cpe:2.3:a:redhat:migration_toolkit_for_containers:-:*:*:*:*:*:*:*
redhat / migration_toolkit_for_virtualization
Version / affected range: -
cpe:2.3:a:redhat:migration_toolkit_for_virtualization:-:*:*:*:*:*:*:*
redhat / network_observability_operator
Version / affected range: -
cpe:2.3:a:redhat:network_observability_operator:-:*:*:*:*:*:*:*
redhat / node_healthcheck_operator
Version / affected range: -
cpe:2.3:a:redhat:node_healthcheck_operator:-:*:*:*:*:*:*:*
redhat / node_maintenance_operator
Version / affected range: -
cpe:2.3:a:redhat:node_maintenance_operator:-:*:*:*:*:*:*:*
redhat / openshift
Version / affected range: -
cpe:2.3:a:redhat:openshift:-:*:*:*:*:aws:*:*
redhat / openshift_api_for_data_protection
Version / affected range: -
cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*
redhat / openshift_container_platform
Version / affected range: 4.0
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
redhat / openshift_container_platform_assisted_installer
Version / affected range: -
cpe:2.3:a:redhat:openshift_container_platform_assisted_installer:-:*:*:*:*:*:*:*
redhat / openshift_data_science
Version / affected range: -
cpe:2.3:a:redhat:openshift_data_science:-:*:*:*:*:*:*:*
redhat / openshift_dev_spaces
Version / affected range: -
cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*
redhat / openshift_developer_tools_and_services
Version / affected range: -
cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*
redhat / openshift_distributed_tracing
Version / affected range: -
cpe:2.3:a:redhat:openshift_distributed_tracing:-:*:*:*:*:*:*:*
redhat / openshift_gitops
Version / affected range: -
cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*
redhat / openshift_pipelines
Version / affected range: -
cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*
redhat / openshift_sandboxed_containers
Version / affected range: -
cpe:2.3:a:redhat:openshift_sandboxed_containers:-:*:*:*:*:*:*:*
redhat / openshift_secondary_scheduler_operator
Version / affected range: -
cpe:2.3:a:redhat:openshift_secondary_scheduler_operator:-:*:*:*:*:*:*:*
redhat / openshift_serverless
Version / affected range: -
cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*
redhat / openshift_service_mesh
Version / affected range: 2.0
cpe:2.3:a:redhat:openshift_service_mesh:2.0:*:*:*:*:*:*:*
redhat / openshift_virtualization
Version / affected range: 4
cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*
redhat / openstack_platform
Version / affected range: 16.1
cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*
redhat / openstack_platform
Version / affected range: 16.2
cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*
redhat / openstack_platform
Version / affected range: 17.1
cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*
redhat / process_automation
Version / affected range: 7.0
cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*
redhat / quay
Version / affected range: 3.0.0
cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*
redhat / run_once_duration_override_operator
Version / affected range: -
cpe:2.3:a:redhat:run_once_duration_override_operator:-:*:*:*:*:*:*:*
redhat / satellite
Version / affected range: 6.0
cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*
redhat / self_node_remediation_operator
Version / affected range: -
cpe:2.3:a:redhat:self_node_remediation_operator:-:*:*:*:*:*:*:*
redhat / service_interconnect
Version / affected range: 1.0
cpe:2.3:a:redhat:service_interconnect:1.0:*:*:*:*:*:*:*
redhat / single_sign-on
Version / affected range: 7.0
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
redhat / support_for_spring_boot
Version / affected range: -
cpe:2.3:a:redhat:support_for_spring_boot:-:*:*:*:*:*:*:*
redhat / web_terminal
Version / affected range: -
cpe:2.3:a:redhat:web_terminal:-:*:*:*:*:*:*:*
redhat / enterprise_linux
Version / affected range: 6.0
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
redhat / enterprise_linux
Version / affected range: 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhat / enterprise_linux
Version / affected range: 9.0
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
redhat / service_telemetry_framework
Version / affected range: 1.5
cpe:2.3:a:redhat:service_telemetry_framework:1.5:*:*:*:*:*:*:*
fedoraproject / fedora
Version / affected range: 37
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
fedoraproject / fedora
Version / affected range: 38
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
netapp / astra_control_center
Version / affected range: -
cpe:2.3:a:netapp:astra_control_center:-:*:*:*:*:*:*:*
netapp / oncommand_insight
Version / affected range: -
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
akka / http_server
Version / affected range: * · before (exclusive) 10.5.3
cpe:2.3:a:akka:http_server:*:*:*:*:*:*:*:*
konghq / kong_gateway
Version / affected range: * · before (exclusive) 3.4.2
cpe:2.3:a:konghq:kong_gateway:*:*:*:*:enterprise:*:*:*
jenkins / jenkins
Version / affected range: * · through (inclusive) 2.414.2
cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
jenkins / jenkins
Version / affected range: * · through (inclusive) 2.427
cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*
apache / solr
Version / affected range: * · before (exclusive) 9.4.0
cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*
openresty / openresty
Version / affected range: * · before (exclusive) 1.21.4.3
cpe:2.3:a:openresty:openresty:*:*:*:*:*:*:*:*
cisco / business_process_automation
Version / affected range: * · before (exclusive) 3.2.003.009
cpe:2.3:a:cisco:business_process_automation:*:*:*:*:*:*:*:*
cisco / connected_mobile_experiences
Version / affected range: * · before (exclusive) 11.1
cpe:2.3:a:cisco:connected_mobile_experiences:*:*:*:*:*:*:*:*
cisco / crosswork_data_gateway
Version / affected range: * · before (exclusive) 4.1.3
cpe:2.3:a:cisco:crosswork_data_gateway:*:*:*:*:*:*:*:*
cisco / crosswork_data_gateway
Version / affected range: * · from (inclusive) 5.0.0 · before (exclusive) 5.0.2
cpe:2.3:a:cisco:crosswork_data_gateway:*:*:*:*:*:*:*:*
cisco / crosswork_situation_manager
Version / affected range: -
cpe:2.3:a:cisco:crosswork_situation_manager:-:*:*:*:*:*:*:*
cisco / crosswork_zero_touch_provisioning
Version / affected range: * · before (exclusive) 6.0.0
cpe:2.3:a:cisco:crosswork_zero_touch_provisioning:*:*:*:*:*:*:*:*
cisco / data_center_network_manager
Version / affected range: -
cpe:2.3:a:cisco:data_center_network_manager:-:*:*:*:*:*:*:*
cisco / enterprise_chat_and_email
Version / affected range: -
cpe:2.3:a:cisco:enterprise_chat_and_email:-:*:*:*:*:*:*:*
cisco / expressway
Version / affected range: * · before (exclusive) x14.3.3
cpe:2.3:a:cisco:expressway:*:*:*:*:*:*:*:*
cisco / iot_field_network_director
Version / affected range: * · before (exclusive) 4.11.0
cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*
cisco / prime_access_registrar
Version / affected range: * · before (exclusive) 9.3.3
cpe:2.3:a:cisco:prime_access_registrar:*:*:*:*:*:*:*:*
cisco / prime_cable_provisioning
Version / affected range: * · before (exclusive) 7.2.1
cpe:2.3:a:cisco:prime_cable_provisioning:*:*:*:*:*:*:*:*
cisco / prime_infrastructure
Version / affected range: * · before (exclusive) 3.10.4
cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*
cisco / prime_network_registrar
Version / affected range: * · before (exclusive) 11.2
cpe:2.3:a:cisco:prime_network_registrar:*:*:*:*:*:*:*:*
cisco / secure_dynamic_attributes_connector
Version / affected range: * · before (exclusive) 2.2.0
cpe:2.3:a:cisco:secure_dynamic_attributes_connector:*:*:*:*:*:*:*:*
cisco / secure_firewall_threat_defense
Version / affected range: * · before (exclusive) 7.4.2
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*
cisco / secure_malware_analytics
Version / affected range: * · before (exclusive) 2.19.2
cpe:2.3:a:cisco:secure_malware_analytics:*:*:*:*:*:*:*:*
cisco / telepresence_video_communication_server
Version / affected range: * · before (exclusive) x14.3.3
cpe:2.3:a:cisco:telepresence_video_communication_server:*:*:*:*:*:*:*:*
cisco / ultra_cloud_core_-_policy_control_function
Version / affected range: * · before (exclusive) 2024.01.0
cpe:2.3:a:cisco:ultra_cloud_core_-_policy_control_function:*:*:*:*:*:*:*:*
cisco / ultra_cloud_core_-_policy_control_function
Version / affected range: 2024.01.0
cpe:2.3:a:cisco:ultra_cloud_core_-_policy_control_function:2024.01.0:*:*:*:*:*:*:*
cisco / ultra_cloud_core_-_serving_gateway_function
Version / affected range: * · before (exclusive) 2024.02.0
cpe:2.3:a:cisco:ultra_cloud_core_-_serving_gateway_function:*:*:*:*:*:*:*:*
cisco / ultra_cloud_core_-_session_management_function
Version / affected range: * · before (exclusive) 2024.02.0
cpe:2.3:a:cisco:ultra_cloud_core_-_session_management_function:*:*:*:*:*:*:*:*
cisco / unified_attendant_console_advanced
Version / affected range: -
cpe:2.3:a:cisco:unified_attendant_console_advanced:-:*:*:*:*:*:*:*
cisco / unified_contact_center_domain_manager
Version / affected range: -
cpe:2.3:a:cisco:unified_contact_center_domain_manager:-:*:*:*:*:*:*:*
cisco / unified_contact_center_enterprise
Version / affected range: -
cpe:2.3:a:cisco:unified_contact_center_enterprise:-:*:*:*:*:*:*:*
cisco / unified_contact_center_enterprise_-_live_data_server
Version / affected range: * · before (exclusive) 12.6.2
cpe:2.3:a:cisco:unified_contact_center_enterprise_-_live_data_server:*:*:*:*:*:*:*:*
cisco / unified_contact_center_management_portal
Version / affected range: -
cpe:2.3:a:cisco:unified_contact_center_management_portal:-:*:*:*:*:*:*:*
cisco / fog_director
Version / affected range: * · before (exclusive) 1.22
cpe:2.3:o:cisco:fog_director:*:*:*:*:*:*:*:*
cisco / ios_xe
Version / affected range: * · before (exclusive) 17.15.1
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
cisco / ios_xr
Version / affected range: * · before (exclusive) 7.11.2
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
cisco / secure_web_appliance_firmware
Version / affected range: * · before (exclusive) 15.1.0
cpe:2.3:o:cisco:secure_web_appliance_firmware:*:*:*:*:*:*:*:*
cisco / nx-os
Version / affected range: * · before (exclusive) 10.2\(7\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
cisco / nx-os
Version / affected range: * · from (inclusive) 10.3\(1\) · before (exclusive) 10.3\(5\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
cisco / nx-os
Version / affected range: * · from (inclusive) 10.4\(1\) · before (exclusive) 10.4\(2\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*

References

Last enrichment sync: 24-Oct-2026 21:19
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

injection, EPSS 0.97), CVE-2024-34351 (Next.js SSRF), CVE-2025-29927 (Next.js authentication bypass), CVE-2023-44487 (HTTP/2 Rapid Reset), and CVE-2022-37434 (zlib heap overflow, EPSS 0.92). AWS Adds Five Risk Indicators to GuardDuty Extended Threat Detection

CVE (6)

MITRE ATT&CK (1)

Vendors (1)

Products (8)

Tools (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.