istio istio

Name: istio istio
Brand: istio

productUS

cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical18high4medium2low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	1.17.6	2023-10-10	3 versions
CVE-2021-39156US	high7.5OT elevated	1.18% (67th)	Exploit	1.10.3	2021-08-24	3 versions
CVE-2020-8595US	high7.3	2.61% (85th)	—	no fix	2020-02-12	2 versions
CVE-2020-10739US	high7.5	2.39% (84th)	—	1.4.9	2020-06-02	2 versions
CVE-2019-14993US	high7.5	2.29% (83rd)	—	1.2.4	2019-08-13	2 versions
CVE-2019-12995US	high7.5	2.19% (82nd)	—	1.2.2	2019-06-28	< 1.2.2
CVE-2021-34824US	high8.8	1.99% (81st)	—	1.10.2	2021-06-29	2 versions
CVE-2019-18836US	high7.5	1.94% (80th)	—	no fix	2019-11-11	1.3.0 → 1.3.3
CVE-2020-11767US	low3.1	1.82% (79th)	—	no fix	2020-04-15	≤ 1.5.1
CVE-2022-23635US	high7.5	1.66% (77th)	—	1.11.7	2022-02-22	3 versions
CVE-2022-24726US	high7.5	1.59% (76th)	—	1.12.5	2022-03-10	3 versions
CVE-2021-31921US	critical9.8OT elevated	1.45% (73rd)	—	1.8.6	2021-06-02	2 versions
CVE-2022-39278US	high7.5	1.43% (73rd)	—	1.15.2	2022-10-13	3 versions
CVE-2019-25014US	medium6.5	1.34% (71st)	—	no fix	2021-01-29	≤ 1.4.9
CVE-2021-31920US	medium6.5OT elevated	1.32% (71st)	—	1.9.5	2021-05-27	2 versions
CVE-2021-39155US	high7.5OT elevated	1.25% (69th)	—	1.11.1	2021-08-24	3 versions
CVE-2019-18817US	high7.5	1.21% (68th)	—	1.3.5	2019-11-12	1.3 → 1.3.5
CVE-2022-31045US	critical9.8	1.18% (68th)	—	1.13.5	2022-06-09	3 versions
CVE-2019-12243US	high7.5	1.18% (67th)	—	no fix	2019-06-05	1.1 → 1.1.6
CVE-2020-16844US	medium6.8	1.09% (65th)	—	no fix	2020-10-01	2 versions
CVE-2022-21679US	critical9.8	1.07% (65th)	—	no fix	2022-01-19	2 versions
CVE-2020-8843US	high7.4	1.06% (65th)	—	no fix	2020-02-14	1.3.0 → 1.3.6
CVE-2022-21701US	high8.8OT elevated	0.77% (55th)	—	no fix	2022-01-19	2 versions
CVE-2022-39388US	low3.5OT elevated	0.49% (42nd)	—	no fix	2022-11-10	1.15.0 → 1.15.2
CVE-2026-31837US	high7.5OT elevated	0.40% (34th)	—	1.27.8	2026-03-10	3 versions
CVE-2026-41413US	high7.7	0.33% (26th)	—	1.29.2	2026-05-07	2 versions
CVE-2026-31838US	medium5.3OT elevated	0.23% (13th)	—	1.29.1	2026-03-10	3 versions
CVE-2026-39350US	—OT elevated	0.21% (11th)	—	1.28.6	2026-04-15	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization8 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-185Incorrect Regular Expression2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan