Read the docs

Red Hat

Records7413All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical792CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

18 records in Certificate System · all components

TI-2021-03479 CVE-2021-20179 · GHSA-q87w-gh3f-77p7

Incorrect authorization in pki-core

Priority LOW 38

A flaw was found in pki-core.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0122 Published 2021-03-15 Partial fix CWE-863
TI-2013-01663 CVE-2013-1886 · GHSA-63g4-9329-q5x4

Format string vulnerability in the token processing system (pki-tps) in Red Hat…

Priority LOW 37

Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0222 Published 2014-01-24 Fixed CWE-134
TI-2017-05152 CVE-2017-7509 · GHSA-2v3w-p5pg-rgxq

Improper input validation in Red Hat Certificate System

Priority LOW 30

An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00726 Published 2018-07-26 Fixed CWE-20
TI-2008-04835 CVE-2008-5082 · GHSA-j872-hj4c-mqf5

The verifyProof function in the Token Processing System (TPS) component in Red Hat…

Priority LOW 28

The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use t…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00775 Published 2009-01-30 Fixed CWE-287
TI-2020-01643 CVE-2020-1696 · GHSA-59m3-5f56-55x8

Cross-site scripting in [UNKNOWN] pki-core

Priority LOW 26

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00764 Published 2020-03-20 Partial fix CWE-79
TI-2022-02209 CVE-2022-2393 · GHSA-hjh3-jq28-5qcc

Improper authorization in pki-core

Priority LOW 25

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2022-07-14 Partial fix CWE-285
TI-2019-07501 CVE-2019-10180 · GHSA-3r6g-5p5v-m39h

Cross-site scripting in [UNKNOWN] pki-core

Priority LOW 23

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00734 Published 2020-03-31 Partial fix CWE-79
Open these records in search →