Known vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes - page 32

Software CPE: cpe:2.3:a:red_hat:advanced_cluster_management_for_kubernets:*:*:*:*:*:*:*:*
Total vulnerabilities: 718
Public exploits: 70
Known exploited (KEV): 18

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Advanced Cluster Management for Kubernetes Red Hat Advanced Cluster Management for Kubernetes is affected by 718 known vulnerabilities: 1 critical, 134 high, 307 medium, 276 low Critical High Medium Low

Vulnerabilities (718)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68954 - Incorrect Regular Expression
CVE-2022-25887
CWE-185 Medium
No
No
2.6.2 02.11.2022 SB2022110267
SB2022110270
SB2023013024
and 2 more
#VU68722 - Improper Authorization
CVE-2022-41974
CWE-285 Low
No
No
2.4.8 26.10.2022 SB2022102601
SB2022102602
SB2022102603
and 43 more
#VU67974 - Incorrect Regular Expression
CVE-2022-25858
CWE-185 Medium
No
No
2.4.8, 2.6.2 06.10.2022 SB2022100649
SB2022100650
SB2022110245
and 8 more
#VU67550 - Missing release of memory after effective lifetime
CVE-2022-38178
CWE-401 Medium
No
No
2.4.8 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 48 more
#VU67549 - Missing release of memory after effective lifetime
CVE-2022-38177
CWE-401 Medium
No
No
2.4.8 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 52 more
#VU67411 - NULL Pointer Dereference
CVE-2020-35525
CWE-476 Medium
No
No
2.4.8, 2.6.2 15.09.2022 SB2020080601
SB2022091540
SB2022092902
and 30 more
#VU67166 - Server-Side Request Forgery (SSRF)
CVE-2022-35949
CWE-918 Medium
No
No
2.4.8 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948
CWE-93 Medium
No
No
2.4.8 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 8 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU66181 - Session Fixation
CVE-2022-25896
CWE-384 Medium
No
No
2.6.2 08.08.2022 SB2022080818
SB2022080819
SB2022110270
and 7 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
2.3.12, 2.4.6, 2.4.8, 2.5.2, 2.6.0, 2.6.2 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107
CWE-78 High
No
No
2.4.6, 2.5.3, 2.6.2 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123
CWE-200 Low
No
No
2.3.12, 2.4.6, 2.5.3 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125
CWE-200 Low
No
No
2.3.12, 2.4.6, 2.5.3 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
2.3.12, 2.4.6, 2.5.3 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU62741 - Integer overflow
CVE-2022-29824
CWE-190 High
No
No
2.3.12, 2.4.6, 2.5.1 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
2.3.12, 2.4.6, 2.5.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more


Showing elements 621 - 640 out of 718