istio kayıtları
istio üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %3,6
- Silahlaştırılmış
- 1 · %3,6
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %71,4
- Yayından KEV’e ortanca
- 0 gün
Tekrar eden sınıflar
- CWE-863 Incorrect Authorization4
- CWE-400 Uncontrolled Resource Consumption3
- CWE-476 NULL Pointer Dereference3
- CWE-185 Incorrect Regular Expression2
- CWE-287 Improper Authentication2
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
90Hemen | CVE-2023-44487Silahlaştırılmış | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, assiemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware · CWE-400 | Yüksek7,5 | KEV | %99,9 | 10 Eki 2023 |
39İzleyin | CVE-2021-31921İstismar yok | Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected serviistio · istio · CWE-862 | Kritik9,8 | — | %1,4 | 2 Haz 2021 |
39İzleyin | CVE-2022-31045İstismar yok | Ill-formed headers may lead to unexpected behavior in Istioistio · istio · CWE-125 | Kritik9,8 | — | %1,1 | 9 Haz 2022 |
39İzleyin | CVE-2022-21679İstismar yok | Authorization Policy bypass in Istioistio · istio · CWE-670 | Kritik9,8 | — | %1,0 | 19 Oca 2022 |
36İzleyin | CVE-2021-34824Kavram kanıtı | Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and Deistio · istio | Yüksek8,8 | — | %1,9 | 29 Haz 2021 |
35İzleyin | CVE-2022-21701İstismar yok | Privileged Escalation in Istioistio · istio · CWE-863 | Yüksek8,8 | — | %0,7 | 19 Oca 2022 |
34İzleyin | CVE-2026-31837İstismar yok | Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.istio · istio · CWE-200 | Yüksek8,7 | — | %0,7 | 10 Mar 2026 |
31İzleyin | CVE-2020-10739İstismar yok | Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a specialistio · istio · CWE-476 | Yüksek7,5 | — | %2,3 | 2 Haz 2020 |
31İzleyin | CVE-2019-14993İstismar yok | Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWistio · istio · CWE-185 | Yüksek7,5 | — | %2,2 | 13 Ağu 2019 |
31İzleyin | CVE-2019-12995İstismar yok | Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy.istio · istio · CWE-476 | Yüksek7,5 | — | %2,1 | 28 Haz 2019 |
31İzleyin | CVE-2019-18836İstismar yok | Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keepenvoyproxy · envoy · CWE-835 | Yüksek7,5 | — | %1,9 | 10 Kas 2019 |
30İzleyin | CVE-2020-8595İstismar yok | Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass.istio · istio · CWE-287 | Yüksek7,3 | — | %2,6 | 12 Şub 2020 |
30İzleyin | CVE-2022-23635İstismar yok | Unauthenticated control plane denial of service attack in Istioistio · istio · CWE-287 | Yüksek7,5 | — | %1,6 | 22 Şub 2022 |
30İzleyin | CVE-2022-24726İstismar yok | Unauthenticated control plane denial of service attack in Istioistio · istio · CWE-400 | Yüksek7,5 | — | %1,5 | 10 Mar 2022 |
30İzleyin | CVE-2022-39278İstismar yok | Istio vulnerable to denial of service attack due to Golang Regex Libraryistio · istio · CWE-400 | Yüksek7,5 | — | %1,4 | 13 Eki 2022 |
30İzleyin | CVE-2019-18817İstismar yok | Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-1istio · istio · CWE-835 | Yüksek7,5 | — | %1,2 | 12 Kas 2019 |
30İzleyin | CVE-2021-39155İstismar yok | Authorization Policy Bypass Due to Case Insensitive Host Comparisonistio · istio · CWE-178 | Yüksek7,5 | — | %1,1 | 24 Ağu 2021 |
30İzleyin | CVE-2021-39156Kavram kanıtı | Fragments in Path May Lead to Authorization Policy Bypassistio · istio · CWE-863 | Yüksek7,5 | — | %1,1 | 24 Ağu 2021 |
30İzleyin | CVE-2019-12243İstismar yok | Istio 1.1.x through 1.1.6 has Incorrect Access Control.istio · istio | Yüksek7,5 | — | %1,1 | 5 Haz 2019 |
30İzleyin | CVE-2026-41413İstismar yok | Istio Vulnerable to SSRF via RequestAuthentication jwksUriistio · istio · CWE-918 | Yüksek7,7 | — | %0,4 | 7 May 2026 |
29İzleyin | CVE-2020-8843İstismar yok | An issue was discovered in Istio 1.3 through 1.3.6.istio · istio · CWE-20 | Yüksek7,4 | — | %1,0 | 14 Şub 2020 |
27İzleyin | CVE-2020-16844İstismar yok | In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcaistio · istio | Orta6,8 | — | %1,0 | 1 Eki 2020 |
27İzleyin | CVE-2026-31838İstismar yok | Istio HTTP debug endpoints on port 15014 to enforce namespace-based authorization, preventing cross-namespace proxy data access.istio · istio · CWE-863 | Orta6,9 | — | %0,3 | 10 Mar 2026 |
26İzleyin | CVE-2019-25014İstismar yok | A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0.istio · istio · CWE-476 | Orta6,5 | — | %1,3 | 29 Oca 2021 |
26İzleyin | CVE-2021-31920İstismar yok | Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escapistio · istio · CWE-706 | Orta6,5 | — | %1,3 | 27 May 2021 |
- CVE-2023-4448790Hemen
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023
- CVE-2021-3192139İzleyin
Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected servi
KritikCVSS 9,8İstismar yokEPSS %1istio · istio2 Haz 2021
- CVE-2022-3104539İzleyin
Ill-formed headers may lead to unexpected behavior in Istio
KritikCVSS 9,8İstismar yokEPSS %1istio · istio9 Haz 2022
- CVE-2022-2167939İzleyin
Authorization Policy bypass in Istio
KritikCVSS 9,8İstismar yokEPSS %1istio · istio19 Oca 2022
- CVE-2021-3482436İzleyin
Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and De
YüksekCVSS 8,8Kavram kanıtıEPSS %1istio · istio29 Haz 2021
- CVE-2022-2170135İzleyin
Privileged Escalation in Istio
YüksekCVSS 8,8İstismar yokEPSS %0istio · istio19 Oca 2022
- CVE-2026-3183734İzleyin
Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.
YüksekCVSS 8,7İstismar yokEPSS %0istio · istio10 Mar 2026
- CVE-2020-1073931İzleyin
Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a special
YüksekCVSS 7,5İstismar yokEPSS %2istio · istio2 Haz 2020
- CVE-2019-1499331İzleyin
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JW
YüksekCVSS 7,5İstismar yokEPSS %2istio · istio13 Ağu 2019
- CVE-2019-1299531İzleyin
Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy.
YüksekCVSS 7,5İstismar yokEPSS %2istio · istio28 Haz 2019
- CVE-2019-1883631İzleyin
Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep
YüksekCVSS 7,5İstismar yokEPSS %1envoyproxy · envoy10 Kas 2019
- CVE-2020-859530İzleyin
Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass.
YüksekCVSS 7,3İstismar yokEPSS %2istio · istio12 Şub 2020
- CVE-2022-2363530İzleyin
Unauthenticated control plane denial of service attack in Istio
YüksekCVSS 7,5İstismar yokEPSS %1istio · istio22 Şub 2022
- CVE-2022-2472630İzleyin
Unauthenticated control plane denial of service attack in Istio
YüksekCVSS 7,5İstismar yokEPSS %1istio · istio10 Mar 2022
- CVE-2022-3927830İzleyin
Istio vulnerable to denial of service attack due to Golang Regex Library
YüksekCVSS 7,5İstismar yokEPSS %1istio · istio13 Eki 2022
- CVE-2019-1881730İzleyin
Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-1
YüksekCVSS 7,5İstismar yokEPSS %1istio · istio12 Kas 2019
- CVE-2021-3915530İzleyin
Authorization Policy Bypass Due to Case Insensitive Host Comparison
YüksekCVSS 7,5İstismar yokEPSS %1istio · istio24 Ağu 2021
- CVE-2021-3915630İzleyin
Fragments in Path May Lead to Authorization Policy Bypass
YüksekCVSS 7,5Kavram kanıtıEPSS %1istio · istio24 Ağu 2021
- CVE-2019-1224330İzleyin
Istio 1.1.x through 1.1.6 has Incorrect Access Control.
YüksekCVSS 7,5İstismar yokEPSS %1istio · istio5 Haz 2019
- CVE-2026-4141330İzleyin
Istio Vulnerable to SSRF via RequestAuthentication jwksUri
YüksekCVSS 7,7İstismar yokEPSS %0istio · istio7 May 2026
- CVE-2020-884329İzleyin
An issue was discovered in Istio 1.3 through 1.3.6.
YüksekCVSS 7,4İstismar yokEPSS %1istio · istio14 Şub 2020
- CVE-2020-1684427İzleyin
In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildca
OrtaCVSS 6,8İstismar yokEPSS %1istio · istio1 Eki 2020
- CVE-2026-3183827İzleyin
Istio HTTP debug endpoints on port 15014 to enforce namespace-based authorization, preventing cross-namespace proxy data access.
OrtaCVSS 6,9İstismar yokEPSS %0istio · istio10 Mar 2026
- CVE-2019-2501426İzleyin
A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0.
OrtaCVSS 6,5İstismar yokEPSS %1istio · istio29 Oca 2021
- CVE-2021-3192026İzleyin
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escap
OrtaCVSS 6,5İstismar yokEPSS %1istio · istio27 May 2021