Vulnerabilities > Istio > Istio > 1.1.13

DATE CVE VULNERABILITY TITLE RISK
2020-04-15 CVE-2020-11767 Information Exposure vulnerability in multiple products
Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue.
network
high complexity
envoyproxy istio CWE-200
2.6
2.6
2019-06-28 CVE-2019-12995 NULL Pointer Dereference vulnerability in Istio
Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy.
network
low complexity
istio CWE-476
5.0
5.0