Known vulnerabilities in Network Observability plugin for the Openshift Console - page 5

Vendor: NetObserv
Software: Network Observability plugin for the Openshift Console
Software CPE: cpe:2.3:a:netobserv:network-observability-console-plugin:*:*:*:*:*:netobserv_operator:*:*
Website: https://github.com/netobserv
Total vulnerabilities: 96
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Network Observability plugin for the Openshift Console Network Observability plugin for the Openshift Console is affected by 96 known vulnerabilities: 7 high, 64 medium, 25 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 1.3.0 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 1.4.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 1.3.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 1.3.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 1.3.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75388 - Out-of-bounds read
CVE-2023-1255		 CWE-125 Low
No
No
 1.3.0 20.04.2023 SB2023042039
SB2023053044
SB2023061445
and 25 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 1.3.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 1.3.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 1.3.0 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 1.3.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 1.2.0 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 1.2.0 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU72322 - Configuration
CVE-2023-0813		 CWE-16 Medium
No
No
 - 16.02.2023 SB2023021624
SB2023021625
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 1.2.0 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 1.3.0 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU62053 - Heap-based Buffer Overflow
CVE-2022-28805		 CWE-122 High
No
No
 1.3.0 11.04.2022 SB2022041112
SB2022051320
SB2023050346
and 14 more


Showing elements 81 - 100 out of 96