Known vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes - page 34

Software CPE: cpe:2.3:a:red_hat:advanced_cluster_management_for_kubernets:*:*:*:*:*:*:*:*
Total vulnerabilities: 718
Public exploits: 70
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Advanced Cluster Management for Kubernetes Red Hat Advanced Cluster Management for Kubernetes is affected by 718 known vulnerabilities: 1 critical, 134 high, 307 medium, 276 low Critical High Medium Low

Vulnerabilities (718)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78874 - Exposure of resource to wrong sphere
CVE-2019-20149
CWE-668 Medium
No
No
2.3.2 02.08.2023 SB2023080233
SB2024022730
SB2021090850
and 1 more
#VU56024 - Resource Management Errors
CVE-2021-33198
CWE-399 Medium
No
No
2.3.2 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197
CWE-862 Medium
No
No
2.3.2 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195
CWE-79 Medium
No
No
2.3.2 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Available
No
2.3.2 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU55257 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-32399
CWE-362 Low
No
No
2.1.11, 2.3.2 22.07.2021 SB2021051144
SB2021072247
SB2021072248
and 58 more
#VU54292 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-3609
CWE-362 Medium
No
No
2.3.2 21.06.2021 SB2021062146
SB2021072222
SB2021072223
and 43 more
#VU52986 - Incorrect Regular Expression
CVE-2021-28092
CWE-185 Low
No
No
2.2.3 10.05.2021 SB2021051003
SB2021051004
SB2023092211
and 1 more
#VU52985 - Incorrect Regular Expression
CVE-2020-28469
CWE-185 Medium
No
No
2.2.3 10.05.2021 SB2021051002
SB2021051004
SB2021072625
and 26 more
#VU52035 - Use After Free
CVE-2021-3347
CWE-416 Low
No
No
2.0.10, 2.1.6, 2.2.2 12.04.2021 SB2021041207
SB2021041208
SB2021042133
and 42 more
#VU52034 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27152
CWE-835 Low
No
No
2.0.10, 2.1.6, 2.2.2 12.04.2021 SB2021041207
SB2021041208
SB2021050603
and 5 more
#VU52033 - Permissions, Privileges, and Access Controls
CVE-2020-0466
CWE-264 Low
No
No
2.0.10, 2.1.6, 2.2.2 12.04.2021 SB2021041207
SB2021041208
SB2021050603
and 27 more
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358
CWE-94 High
No
No
2.0.10, 2.2.3 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU52195 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-20305
CWE-327 High
No
No
2.0.10, 2.1.6, 2.2.3 06.04.2021 SB2021041367
SB2021041616
SB2021041803
and 36 more
#VU51767 - Server-Side Request Forgery (SSRF)
CVE-2021-28918
CWE-918 Medium
No
No
2.2.3 29.03.2021 SB2021032916
SB2021051004
SB2021051149
#VU51455 - Incorrect Conversion between Numeric Types
CVE-2021-27218
CWE-681 Low
No
No
2.3.2 15.03.2021 SB2021021523
SB2021032305
SB2021070711
and 25 more
#VU49914 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-28374
CWE-22 Medium
No
No
2.0.10, 2.1.6, 2.2.2 13.01.2021 SB2021012124
SB2021012125
SB2021012126
and 48 more
#VU48480 - Improper input validation
CVE-2020-28362
CWE-20 Medium
No
No
2.0.10 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845
CWE-835 Medium
No
No
2.0.10 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586
CWE-362 Medium
No
No
2.0.10 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more


Showing elements 661 - 680 out of 718