Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Proxy Server

Envoy Proxy

Envoy is an open source edge and service proxy designed for cloud-native applications

Official Site:

https://www.envoyproxy.io/

Severity Summary:

Critical: 14 High: 73 Medium: 24 Low: 1
Reference
Title
Severity
CVE-2021-28683
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2021-29258
Envoy Proxy Reachable Assertion Vulnerability
High
CVE-2021-21378
Envoy Proxy Improper Authentication Vulnerability
High
CVE-2020-35470
Envoy Wrong DOWNSTREAM_REMOTE_ADDRESS logged Issue
High
CVE-2021-39206
Envoy Proxy Incorrect Authorization Vulnerability
High
CVE-2019-9900
Envoy Proxy Improper Input Validation Vulnerability
High
CVE-2019-15225
Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2019-15226
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2019-18836
Envoy Proxy Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2019-18838
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2020-12603
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2020-12604
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2020-12605
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2020-8663
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2021-32777
Envoy Proxy Incorrect Authorization Vulnerability
High
CVE-2021-32781
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2021-39204
Envoy Proxy Excessive Iteration Vulnerability
High
CVE-2023-35945
Envoy Proxy Incomplete Cleanup Vulnerability
High
CVE-2022-29225
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability
High
CVE-2021-39162
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability
High
CVE-2022-29227
Envoy Proxy Use After Free Vulnerability
High
CVE-2022-29228
Envoy Proxy Reachable Assertion Vulnerability
High
CVE-2021-43824
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2023-27496
Envoy Proxy Vulnerability
High
CVE-2021-43825
Envoy Proxy Use After Free Vulnerability
High
CVE-2021-43826
Envoy Proxy Use After Free Vulnerability
High
CVE-2022-21655
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability
High
CVE-2026-48090
Envoy Proxy Use After Free Vulnerability
Medium
CVE-2023-35944
Envoy Proxy Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability
Medium
CVE-2024-23323
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
Medium