Known vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes - page 36

Software CPE: cpe:2.3:a:red_hat:advanced_cluster_management_for_kubernets:*:*:*:*:*:*:*:*
Total vulnerabilities: 718
Public exploits: 70
Known exploited (KEV): 18

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Advanced Cluster Management for Kubernetes Red Hat Advanced Cluster Management for Kubernetes is affected by 718 known vulnerabilities: 1 critical, 134 high, 307 medium, 276 low Critical High Medium Low

Vulnerabilities (718)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57036 - Heap-based Buffer Overflow
CVE-2021-32626
CWE-122 Medium
No
No
2.1.12, 2.3.3 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 24 more
#VU57032 - Integer overflow
CVE-2021-32628
CWE-190 High
No
No
2.1.12, 2.3.3 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU57033 - Integer overflow
CVE-2021-32627
CWE-190 High
No
No
2.1.12, 2.3.3 04.10.2021 SB2021100404
SB2021102001
SB2021102109
and 22 more
#VU56902 - Permissions, Privileges, and Access Controls
CVE-2021-25741
CWE-264 Medium
Available
No
2.3.3 28.09.2021 SB2021092804
SB2021092805
SB2021092913
and 8 more
#VU54492 - Session Fixation
CVE-2021-21671
CWE-384 Medium
No
No
2.3.3 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU54491 - Permissions, Privileges, and Access Controls
CVE-2021-21670
CWE-264 Low
No
No
2.3.3 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU54184 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32690
CWE-200 Medium
No
No
2.3.3 17.06.2021 SB2021061703
SB2021062219
SB2021092220
and 3 more
#VU53543 - Off-by-one Error
CVE-2021-23017
CWE-193 High
Available
No
2.1.11, 2.3.3 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU52986 - Incorrect Regular Expression
CVE-2021-28092
CWE-185 Low
No
No
2.2.3 10.05.2021 SB2021051003
SB2021051004
SB2023092211
and 1 more
#VU52985 - Incorrect Regular Expression
CVE-2020-28469
CWE-185 Medium
No
No
2.2.3 10.05.2021 SB2021051002
SB2021051004
SB2021072625
and 26 more
#VU52903 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-35149
CWE-94 Medium
No
No
2.1.6 06.05.2021 SB2020121117
SB2021050603
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358
CWE-94 High
No
No
2.0.10, 2.2.3 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU52195 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-20305
CWE-327 High
No
No
2.0.10, 2.1.6, 2.2.3 06.04.2021 SB2021041367
SB2021041616
SB2021041803
and 36 more
#VU51767 - Server-Side Request Forgery (SSRF)
CVE-2021-28918
CWE-918 Medium
No
No
2.2.3 29.03.2021 SB2021032916
SB2021051004
SB2021051149
#VU48480 - Improper input validation
CVE-2020-28362
CWE-20 Medium
No
No
2.0.10 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU47910 - Allocation of Resources Without Limits or Throttling
CVE-2020-25648
CWE-770 Medium
No
No
2.3.3 21.10.2020 SB2020102132
SB2020102609
SB2021050605
and 18 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845
CWE-835 Medium
No
No
2.0.10 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586
CWE-362 Medium
No
No
2.0.10 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more


Showing elements 701 - 720 out of 718