Known vulnerabilities in cert-manager Operator for Red Hat OpenShift

Software CPE: cpe:2.3:a:cert-manager:cert-manager_operator_for_red_hat_openshift:*:*:*:*:*:*:*:*
Total vulnerabilities: 47
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cert-manager Operator for Red Hat OpenShift cert-manager Operator for Red Hat OpenShift is affected by 47 known vulnerabilities: 5 high, 30 medium, 12 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441
CWE-409 Medium
No
No
1.18.1 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119236 - Improper Certificate Validation
CVE-2025-61727
CWE-295 Low
No
No
1.18.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 21 more
#VU119235 - Resource exhaustion
CVE-2025-61729
CWE-400 Medium
No
No
1.18.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU119231 - Resource exhaustion
CVE-2025-66471
CWE-400 Medium
No
No
1.18.1 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418
CWE-770 Medium
No
No
1.18.1 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU105450 - Resource exhaustion
CVE-2025-27144
CWE-400 Medium
No
No
- 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU103270 - Resource Management Errors
CVE-2024-12401
CWE-399 Low
No
No
1.12.14, 1.15.4, 1.16.2 24.01.2025 SB2025012404
SB2025061318
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
1.11.5, 1.12.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
1.11.5, 1.12.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.11.5, 1.12.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054
CWE-824 Medium
No
No
1.11.5, 1.12.1 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79344 - Double Free
CVE-2023-39975
CWE-415 Medium
No
No
1.11.5, 1.12.1 10.08.2023 SB2023081014
SB20230821173
SB2023110766
and 26 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
1.11.5 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU77351 - Improper input validation
CVE-2023-29499
CWE-20 Medium
No
No
1.11.5, 1.12.1 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 35 more
#VU77350 - Resource exhaustion
CVE-2023-32611
CWE-400 Medium
No
No
1.11.5, 1.12.1 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77349 - Resource exhaustion
CVE-2023-32665
CWE-400 Medium
No
No
1.11.5, 1.12.1 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602
CWE-401 Medium
No
No
1.11.5 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU75141 - Memory corruption
CVE-2023-29491
CWE-119 Low
No
No
1.11.5, 1.12.1 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
1.11.5 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU63553 - Integer overflow
CVE-2021-43618
CWE-190 Medium
No
No
1.11.5, 1.12.1 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more


Showing elements 1 - 20 out of 47