Known vulnerabilities in kubernetes-kubeadm

Vendor: openEuler
Software: kubernetes-kubeadm
Software CPE: cpe:2.3:o:openeuler:kubernetes-kubeadm:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 15
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting kubernetes-kubeadm kubernetes-kubeadm is affected by 15 known vulnerabilities: 9 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138768 - Allocation of Resources Without Limits or Throttling
CVE-2026-35469		 CWE-770 Low
No
No
 1.20.2-30 20.07.2026 SB20260720353
SB20260720355
SB20260720356
and 39 more
#VU119960 - Server-Side Request Forgery (SSRF)
CVE-2025-13281		 CWE-918 Medium
No
No
 1.20.2-28, 1.29.1-14 15.12.2025 SB2025121522
SB2025121530
SB2025121531
and 5 more
#VU115217 - Incorrect Authorization
CVE-2025-5187		 CWE-863 Low
No
No
 1.20.2-27, 1.29.1-13 15.09.2025 SB2025091545
SB2025091548
SB2025091549
and 15 more
#VU104215 - Resource Management Errors
CVE-2025-0426		 CWE-399 Medium
No
No
 1.29.1-11 26.02.2025 SB2025022620
SB2025022624
SB2025030776
and 4 more
#VU101778 - Improper input validation
CVE-2024-10220		 CWE-20 Medium
Available
No
 1.20.2-26 13.12.2024 SB2024121351
SB2024121363
SB2025021320
and 4 more
#VU88934 - Permissions, Privileges, and Access Controls
CVE-2024-3177		 CWE-264 Low
No
No
 1.20.2-21, 1.20.2-23 23.04.2024 SB2024042334
SB2024042342
SB2024042343
and 17 more
#VU79792 - Improper input validation
CVE-2021-25743		 CWE-20 Medium
No
No
 1.20.2-15, 1.20.2-16 21.08.2023 SB2022010713
SB2023082160
SB2023100316
and 10 more
#VU77775 - Permissions, Privileges, and Access Controls
CVE-2023-2431		 CWE-264 Low
No
No
 1.20.2-20 28.06.2023 SB2023062858
SB2023062901
SB20230820248
and 8 more
#VU77526 - Permissions, Privileges, and Access Controls
CVE-2023-2728		 CWE-264 Medium
Available
No
 1.20.2-20 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU77525 - Permissions, Privileges, and Access Controls
CVE-2023-2727		 CWE-264 Medium
No
No
 1.20.2-20 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU76474 - Improper input validation
CVE-2022-3294		 CWE-20 Medium
No
No
 1.20.2-20 24.05.2023 SB2023052426
SB2023052522
SB2023070826
and 7 more
#VU71364 - Improper Access Control
CVE-2022-3162		 CWE-284 Low
No
No
 1.20.2-20 19.01.2023 SB2023011938
SB2023011939
SB2023020908
and 17 more
#VU67554 - Server-Side Request Forgery (SSRF)
CVE-2022-3172		 CWE-918 Medium
No
No
 1.20.2-9 21.09.2022 SB2022092138
SB2022102614
SB2023011939
and 23 more
#VU56245 - Improper input validation
CVE-2021-25735		 CWE-20 Medium
Available
No
 1.20.2-5 01.09.2021 SB2021090125
SB2021090126
SB2022083132
and 4 more
#VU53436 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25737		 CWE-200 Low
No
No
 1.20.2-5 24.05.2021 SB2021052409
SB2021060911
SB2021090126
and 4 more