Known vulnerabilities in Red Hat OpenShift Serverless 1.21.0

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Version: 1.21.0
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 127
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless version 1.21.0 Red Hat OpenShift Serverless 1.21.0 is affected by 127 vulnerabilities: 1 critical, 22 high, 71 medium, 33 low Critical High Medium Low

Vulnerabilities (127)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88097 - Unprotected Transport of Credentials
CVE-2024-28110		 CWE-523 Medium
No
No
 1.32.0 03.04.2024 SB2024040352
SB2024040353
SB2024062742
and 2 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 1.31.1, 1.32.0 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85582 - Resource exhaustion
CVE-2023-49568		 CWE-400 Medium
No
No
 1.31.1 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 37 more
#VU85467 - Improper input validation
CVE-2024-20932		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 47 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU84568 - Observable discrepancy
CVE-2023-6135		 CWE-203 Medium
No
No
 1.32.0 19.12.2023 SB2023121946
SB2023122118
SB2024010201
and 33 more
#VU83304 - Reachable Assertion
CVE-2023-38473		 CWE-617 Low
No
No
 1.31.1, 1.32.0 20.11.2023 SB2023112056
SB2023112057
SB2023112113
and 32 more
#VU83303 - Reachable Assertion
CVE-2023-38472		 CWE-617 Low
No
No
 1.31.1, 1.32.0 20.11.2023 SB2023112056
SB2023112057
SB2023112113
and 31 more
#VU81044 - Out-of-bounds read
CVE-2023-39615		 CWE-125 Medium
No
No
 1.31.1, 1.32.0 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 1.32.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 1.32.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 1.32.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79308 - Reachable Assertion
CVE-2023-38471		 CWE-617 Low
No
No
 1.31.1, 1.32.0 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU79307 - Reachable Assertion
CVE-2023-38470		 CWE-617 Medium
No
No
 1.31.1, 1.32.0 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU79306 - Reachable Assertion
CVE-2023-38469		 CWE-617 Medium
No
No
 1.31.1, 1.32.0 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more


Showing elements 1 - 20 out of 127