Known vulnerabilities in Network Observability plugin for the Openshift Console - page 4

Vendor: NetObserv
Software: Network Observability plugin for the Openshift Console
Software CPE: cpe:2.3:a:netobserv:network-observability-console-plugin:*:*:*:*:*:netobserv_operator:*:*
Website: https://github.com/netobserv
Total vulnerabilities: 96
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Network Observability plugin for the Openshift Console Network Observability plugin for the Openshift Console is affected by 96 known vulnerabilities: 7 high, 64 medium, 25 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 - 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 1.5.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.5.0 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 - 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 - 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 - 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 - 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80575 - Improper input validation
CVE-2023-39322		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 1.4.0 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 1.4.0 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 - 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 - 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 1.4.0 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 1.4.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.4.0 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.4.0 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.4.0 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more


Showing elements 61 - 80 out of 96