Known vulnerabilities in Network Observability plugin for the Openshift Console

Vendor: NetObserv
Software: Network Observability plugin for the Openshift Console
Software CPE: cpe:2.3:a:netobserv:network-observability-console-plugin:*:*:*:*:*:netobserv_operator:*:*
Website: https://github.com/netobserv
Total vulnerabilities: 96
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Network Observability plugin for the Openshift Console Network Observability plugin for the Openshift Console is affected by 96 known vulnerabilities: 7 high, 64 medium, 25 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 1.7.0 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 1.7.0 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 1.7.0 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 1.7.0 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 1.7.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 1.7.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 1.7.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 1.7.0 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 1.7.0 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 1.7.0 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 1.7.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 1.6.2 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 1.6.2 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 1.6.2 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 1.6.1 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU91159 - Improper input validation
CVE-2024-24789		 CWE-20 Low
No
No
 1.6.1 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU89351 - Insufficient Verification of Data Authenticity
CVE-2024-34397		 CWE-345 Low
No
No
 1.6.2 10.05.2024 SB2024051042
SB2024051043
SB2024051044
and 88 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 1.6.2 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 1.6.0 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 1.6.0 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more


Showing elements 1 - 20 out of 96