Known vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes - page 3

Software CPE: cpe:2.3:a:red_hat:advanced_cluster_management_for_kubernets:*:*:*:*:*:*:*:*
Total vulnerabilities: 718
Public exploits: 70
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Advanced Cluster Management for Kubernetes Red Hat Advanced Cluster Management for Kubernetes is affected by 718 known vulnerabilities: 1 critical, 134 high, 307 medium, 276 low Critical High Medium Low

Vulnerabilities (718)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105983 - Resource exhaustion
CVE-2025-30204
CWE-400 Medium
No
No
2.9.9, 2.10.8, 2.11.7, 2.13.3 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105461 - Resource exhaustion
CVE-2025-22868
CWE-400 Medium
No
No
2.12.3 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
2.10.8, 2.11.7, 2.12.3, 2.13.2 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
2.10.8, 2.11.7, 2.12.3 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
2.10.8, 2.11.7, 2.12.3 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
2.9.9, 2.13.3 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
2.13.3 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
2.9.9, 2.13.3 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103812 - Improper input validation
CVE-2025-0938
CWE-20 Low
No
No
2.13.3 11.02.2025 SB20250211115
SB20250211130
SB20250211131
and 77 more
#VU103771 - Improper Authentication
CVE-2024-12797
CWE-287 Medium
No
No
2.10.8, 2.11.7, 2.12.3 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103687 - Memory corruption
CVE-2025-0395
CWE-119 Medium
No
No
2.9.9, 2.10.8, 2.11.7 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
2.13.3 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU103502 - Use After Free
CVE-2022-49043
CWE-416 Medium
No
No
2.11.7, 2.12.3 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU103455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45336
CWE-200 Low
No
No
2.11.7 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 38 more
#VU102871 - Improper Encoding or Escaping of Output
CVE-2024-52005
CWE-116 Medium
No
No
2.13.3 16.01.2025 SB2025011641
SB2025021457
SB2025051343
and 18 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
2.9.6, 2.10.8, 2.11.7, 2.12.3 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU90156 - Security Features
CVE-2024-35195
CWE-254 Low
No
No
2.9.6, 2.13.3 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236
CWE-208 Medium
No
No
2.10.7, 2.10.8, 2.11.4, 2.11.7, 2.12.1, 2.12.3 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 58 more
#VU63060 - Heap-based Buffer Overflow
CVE-2021-3903
CWE-122 High
No
No
2.10.7, 2.10.8, 2.11.4, 2.11.7, 2.12.1, 2.12.3 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 39 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
2.10.8, 2.11.7, 2.12.3 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 41 - 60 out of 718