redhat quay

Name: redhat quay
Brand: redhat

productUS

cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical17high17medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	= 3.0.0
CVE-2019-9511US	high7.5	59.5% (99th)	Exploit	no fix	2019-08-13	= 3.0.0
CVE-2022-1227US	high8.8	4.17% (91st)	Exploit	no fix	2022-04-29	= 3.0.0
CVE-2019-9515US	high7.5	87.3% (100th)	—	no fix	2019-08-13	= 3.0.0
CVE-2019-9514US	high7.5	82.8% (100th)	—	no fix	2019-08-13	= 3.0.0
CVE-2019-9513US	high7.5	81.6% (100th)	—	no fix	2019-08-13	= 3.0.0
CVE-2019-9516US	medium6.5	56.3% (99th)	—	no fix	2019-08-13	= 3.0.0
CVE-2019-9517US	high7.5	27.9% (98th)	—	no fix	2019-08-13	= 3.0.0
CVE-2019-9518US	high7.5	25.4% (98th)	—	no fix	2019-08-13	= 3.0.0
CVE-2021-3762US	critical9.8	4.81% (92nd)	—	no fix	2022-03-03	= 3.5.6
CVE-2020-10735US	high7.5	4.49% (91st)	—	no fix	2022-09-09	= 3.0.0
CVE-2020-27832US	critical9.0	0.91% (60th)	—	3.3.2	2021-05-27	3.0.0 → 3.3.2
CVE-2020-14313US	medium4.3	0.87% (59th)	—	3.3.1	2020-08-11	< 3.3.1
CVE-2026-44495US	high7.7	0.85% (58th)	—	no fix	2026-06-11	—
CVE-2022-2447US	medium6.6	0.72% (54th)	—	no fix	2022-09-01	= 3.0.0
CVE-2019-3865US	medium6.1	0.72% (54th)	—	no fix	2020-06-22	= 2.0.0
CVE-2023-4956US	medium4.3	0.55% (46th)	—	no fix	2023-11-07	= 3.0.0
CVE-2020-27831US	medium4.3	0.55% (46th)	—	3.3.3	2021-05-27	3.0.0 → 3.3.3
CVE-2026-32590US	high8.8	0.52% (44th)	—	no fix	2026-04-08	= 3.0.0
CVE-2023-3384US	medium5.4	0.49% (42nd)	—	no fix	2023-07-24	= 3.0.0
CVE-2026-74243US	high8.2OT elevated	0.46% (40th)	—	no fix	2026-08-14	= 3.0.0
CVE-2019-3864US	high8.8	0.44% (38th)	—	3.0.0	2020-01-21	< 3.0.0
CVE-2026-74245US	high7.5OT elevated	0.42% (36th)	—	no fix	2026-08-14	= 3.0.0
CVE-2026-2377US	—	0.40% (35th)	—	no fix	2026-04-08	= 3.0.0
CVE-2025-4374US	—	0.34% (27th)	—	no fix	2025-05-06	≤ 3.14.0
CVE-2026-74242US	medium4.4	0.33% (27th)	—	no fix	2026-08-14	= 3.0.0
CVE-2026-32591US	medium5.5	0.33% (25th)	—	no fix	2026-04-08	= 3.0.0
CVE-2026-74241US	medium6.5	0.31% (24th)	—	no fix	2026-08-14	= 3.0.0
CVE-2023-4959US	medium6.5	0.30% (22nd)	—	no fix	2023-09-15	= 3.0.0
CVE-2024-9683US	medium5.3	0.30% (22nd)	—	no fix	2024-10-17	= 3.0.0
CVE-2019-3867US	medium4.1	0.29% (22nd)	—	no fix	2021-03-18	2 versions
CVE-2026-74240US	medium5.4	0.29% (22nd)	—	no fix	2026-08-14	= 3.0.0
CVE-2019-10205US	medium6.3	0.27% (19th)	—	no fix	2020-01-02	= 3.0.0
CVE-2026-6848US	high8.1	0.27% (19th)	—	no fix	2026-04-22	= 3.0.0
CVE-2026-74247US	high7.1	0.24% (16th)	—	no fix	2026-08-14	= 3.0.0
CVE-2026-32589US	—	0.24% (15th)	—	no fix	2026-04-08	= 3.0.0
CVE-2026-74244US	high7.5	0.23% (14th)	—	no fix	2026-08-14	= 3.0.0
CVE-2024-5891US	medium4.2	0.23% (13th)	—	no fix	2024-06-12	= 3.0.0
CVE-2026-2376US	medium5.4	0.16% (5th)	—	no fix	2026-03-12	= 3.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan