Known vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes - page 33

Software CPE: cpe:2.3:a:red_hat:advanced_cluster_management_for_kubernets:*:*:*:*:*:*:*:*
Total vulnerabilities: 718
Public exploits: 70
Known exploited (KEV): 18

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Advanced Cluster Management for Kubernetes Red Hat Advanced Cluster Management for Kubernetes is affected by 718 known vulnerabilities: 1 critical, 134 high, 307 medium, 276 low Critical High Medium Low

Vulnerabilities (718)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67205 - Improper Access Control
CVE-2022-36067
CWE-284 High
Available
No
2.4.6, 2.5.2, 2.6.1 13.09.2022 SB2022091301
SB2022091302
SB2022091303
and 5 more
#VU67165 - Exposure of resource to wrong sphere
CVE-2022-31151
CWE-668 Low
No
No
2.4.6 11.09.2022 SB2022091108
SB2022092664
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-31150
CWE-93 Medium
No
No
2.4.6 11.09.2022 SB2022091108
SB2022091110
SB2022091217
and 2 more
#VU66757 - Use After Free
CVE-2022-2526
CWE-416 Medium
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU66070 - Resource exhaustion
CVE-2022-30633
CWE-400 Medium
No
No
2.6.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635
CWE-400 Medium
No
No
2.6.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632
CWE-400 Medium
No
No
2.6.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148
CWE-254 Medium
No
No
2.6.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
2.6.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66062 - Resource exhaustion
CVE-2022-30631
CWE-400 Medium
No
No
2.6.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU64668 - Use After Free
CVE-2022-32250
CWE-416 Low
Available
No
2.3.12, 2.5.2, 2.6.0 24.06.2022 SB2022062427
SB2022062437
SB2022062440
and 57 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64508 - Out-of-bounds read
CVE-2022-1927
CWE-125 Low
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 20.06.2022 SB2022062022
SB2022080332
SB2022080610
and 49 more
#VU64506 - Out-of-bounds write
CVE-2022-1897
CWE-787 Low
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 20.06.2022 SB2022062022
SB2022070807
SB2022080332
and 48 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012
CWE-401 Medium
No
No
2.3.12, 2.5.2, 2.6.0 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU63487 - Out-of-bounds write
CVE-2022-1785
CWE-787 High
No
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 20.05.2022 SB2022052017
SB2022062022
SB2022063027
and 47 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
2.3.12, 2.4.6, 2.5.2, 2.6.0 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313
CWE-121 High
No
No
2.3.12, 2.4.6, 2.5.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528
CWE-327 Medium
No
No
2.3.12, 2.4.6, 2.5.1 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more


Showing elements 641 - 660 out of 718