Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27492) Medium Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2022-21655) High Envoy Proxy Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-45806) Critical Envoy Proxy CVE-2019-18802 Vulnerability (CVE-2019-18802) Critical Envoy Proxy CVE-2020-25018 Vulnerability (CVE-2020-25018) High Envoy Proxy CVE-2023-27487 Vulnerability (CVE-2023-27487) Critical Envoy Proxy CVE-2023-27488 Vulnerability (CVE-2023-27488) Critical Envoy Proxy CVE-2023-27496 Vulnerability (CVE-2023-27496) High Envoy Proxy CVE-2024-7207 Vulnerability (CVE-2024-7207) Critical Envoy Proxy CVE-2024-23324 Vulnerability (CVE-2024-23324) High Envoy Proxy CVE-2024-45807 Vulnerability (CVE-2024-45807) High Envoy Proxy CVE-2024-45810 Vulnerability (CVE-2024-45810) High Envoy Proxy CVE-2025-30157 Vulnerability (CVE-2025-30157) High Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-32778) High Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-39204) High Envoy Proxy Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-11767) Low Envoy Proxy Improper Authentication Vulnerability (CVE-2021-21378) High Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21654) Critical Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21656) Medium Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21657) Medium Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-32780) High Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-39162) High Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2023-35941) Critical Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2024-45808) Medium Envoy Proxy Improper Handling of Exceptional Conditions Vulnerability (CVE-2024-23325) High Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2022-29225) High Envoy Proxy Improper Input Validation Vulnerability (CVE-2019-9900) High Envoy Proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-29492) Critical Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-12604) High Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2021-32781) High Envoy Proxy Incomplete Cleanup Vulnerability (CVE-2023-35945) High Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27491) Critical Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27493) Critical Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-35944) Medium Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326) High Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32777) High Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32779) High Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206) High Envoy Proxy Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-8660) Medium Envoy Proxy Integer Overflow or Wraparound Vulnerability (CVE-2021-28682) High Envoy Proxy Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2024-32975) High Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836) High Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-32976) High Envoy Proxy Missing Authentication for Critical Function Vulnerability (CVE-2022-29226) Critical Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838) High Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-28683) High Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824) High Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2022-29224) Medium Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327) High Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-45809) High Envoy Proxy Origin Validation Error Vulnerability (CVE-2020-15104) Medium Envoy Proxy Other Vulnerability (CVE-2020-25017) High Envoy Proxy Other Vulnerability (CVE-2024-34363) High Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801) Critical Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364) Medium Envoy Proxy Reachable Assertion Vulnerability (CVE-2021-29258) High Envoy Proxy Reachable Assertion Vulnerability (CVE-2022-29228) High Envoy Proxy Uncontrolled Recursion Vulnerability (CVE-2022-23606) Medium Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2019-15226) High Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-8663) High Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12603) High Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12605) High Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487) High Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2024-23323) Medium Envoy Proxy Use After Free Vulnerability (CVE-2021-43825) High Envoy Proxy Use After Free Vulnerability (CVE-2021-43826) High Envoy Proxy Use After Free Vulnerability (CVE-2022-29227) High Envoy Proxy Use After Free Vulnerability (CVE-2023-35942) Medium Envoy Proxy Use After Free Vulnerability (CVE-2023-35943) High Envoy Proxy Use After Free Vulnerability (CVE-2024-23322) High Envoy Proxy Use After Free Vulnerability (CVE-2024-32974) High Envoy Proxy Use After Free Vulnerability (CVE-2024-34362) Medium Envoy Proxy Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2019-9901) Critical Envoy Wrong DOWNSTREAM_REMOTE_ADDRESS logged Issue (CVE-2020-35470) High Error messages Low 1...35363738...306 36 / 306
