What’s Vulnerable › Products

Red Hat 3scale API Management Platform 2 vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Red Hat 3scale API Management Platform 2 version is affected

Latest Red Hat 3scale API Management Platform 2 vulnerabilities

• CVE-2026-46625 — JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection (CVSS 7.5)
• CVE-2024-12125 — 3scale-porta: readonly fields not validated server-side (CVSS 7.5)
• CVE-2025-49794 — Libxml: heap use after free (uaf) leads to denial of service (dos) (CVSS 9.1)
• CVE-2024-11831 — Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript (CVSS 5.4)
• CVE-2024-10295 — Gateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a request (CVSS 7.5)
• CVE-2023-4910 — 3scale-admin-portal: logged out users tokens can be accessed (CVSS 5.5)
• CVE-2022-1414 — (CVSS 8.8)
• CVE-2022-0330 — (CVSS 7.8)
• CVE-2021-3656 — (CVSS 8.8)
• CVE-2021-3609 — (CVSS 7.0)
• CVE-2020-14388 — (CVSS 6.3)
• CVE-2021-3412 — (CVSS 7.3)
• CVE-2020-25634 — (CVSS 5.4)
• CVE-2019-14852 — (CVSS 7.5)
• CVE-2021-20252 — (CVSS 6.5)
• CVE-2019-10216 — (CVSS 7.8)