Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Proxy Server

Envoy Proxy

Envoy is an open source edge and service proxy designed for cloud-native applications

Official Site:

https://www.envoyproxy.io/

Severity Summary:

Critical: 14 High: 81 Medium: 29 Low: 1
Reference
Title
Severity
CVE-2019-18802
Envoy Proxy Vulnerability
Critical
CVE-2019-18801
Envoy Proxy Out-of-bounds Write Vulnerability
Critical
CVE-2019-9901
Envoy Proxy Use of Incorrectly-Resolved Name or Reference Vulnerability
Critical
CVE-2021-29492
Envoy Proxy Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2022-21654
Envoy Proxy Improper Certificate Validation Vulnerability
Critical
CVE-2022-29226
Envoy Proxy Missing Authentication for Critical Function Vulnerability
Critical
CVE-2023-27487
Envoy Proxy Vulnerability
Critical
CVE-2023-27493
Envoy Proxy Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability
Critical
CVE-2023-27491
Envoy Proxy Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability
Critical
CVE-2023-27488
Envoy Proxy Vulnerability
Critical
CVE-2023-35941
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability
Critical
CVE-2024-45806
Envoy Proxy Authorization Bypass Through User-Controlled Key Vulnerability
Critical
CVE-2024-7207
Envoy Proxy Vulnerability
Critical
CVE-2024-39305
Envoy Proxy Use After Free Vulnerability
Critical
CVE-2020-25018
Envoy Proxy Vulnerability
High
CVE-2020-25017
Envoy Proxy Other Vulnerability
High
CVE-2020-8663
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2020-12605
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2020-12604
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2020-12603
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2019-18838
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2019-18836
Envoy Proxy Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2019-15226
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2019-15225
Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2019-9900
Envoy Proxy Improper Input Validation Vulnerability
High
CVE-2020-35470
Envoy Wrong DOWNSTREAM_REMOTE_ADDRESS logged Issue
High
CVE-2020-35471
Envoy mishandles dropped and truncated datagrams Issue
High
CVE-2021-21378
Envoy Proxy Improper Authentication Vulnerability
High
CVE-2021-29258
Envoy Proxy Reachable Assertion Vulnerability
High
CVE-2021-28683
Envoy Proxy NULL Pointer Dereference Vulnerability
High