Skip to content

Product

generic connext_professional vulnerabilities

29 published CVES affecting generic connext_professional, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
29
Critical
2
High
11
Medium
16
Low
0
Unscored
0
CISA KEV
0

Latest generic connext_professional CVEs

Newest publication first · page 1 of 2

  1. MediumCVSS 6.8 EPSS 0.15%

    Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0...

  2. MediumCVSS 6.8 EPSS 0.15%

    Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0...

  3. HighCVSS 8.8 EPSS 0.25%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.3,...

  4. MediumCVSS 6.9 EPSS 0.21%

    Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1., from 6.0....

  5. HighCVSS 7.0 EPSS 0.24%

    Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serialization External Entities Blowu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.