Known vulnerabilities in atomic-openshift-web-console (Red Hat package) - page 3

Vendor: Red Hat Inc.
Software: atomic-openshift-web-console (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:atomic-openshift-web-console_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 52
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting atomic-openshift-web-console (Red Hat package) atomic-openshift-web-console (Red Hat package) is affected by 52 known vulnerabilities: 10 high, 30 medium, 12 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73227 - Use of Insufficiently Random Values
CVE-2019-11840		 CWE-330 Medium
No
No
 3.11.374-1.git.647.9e78d83.el7 10.03.2023 SB2019050924
SB2023031017
SB2023031018
and 2 more
#VU60104 - Improper input validation
CVE-2020-8554		 CWE-20 Medium
No
No
 3.11.374-1.git.647.9e78d83.el7 27.01.2022 SB2022012749
SB2022012750
SB2022042257
and 2 more
#VU53399 - Security Features
CVE-2021-30465		 CWE-254 Low
No
No
 3.11.452-1.git.84ed3f6.el7 20.05.2021 SB2021052013
SB2021052014
SB2021052015
and 33 more
#VU51604 - Improper Validation of Certificate with Host Mismatch
CVE-2021-28363		 CWE-297 Medium
No
No
 3.11.420-1.git.693.897d713.el7 22.03.2021 SB2021032215
SB2021052523
SB2021071501
and 9 more
#VU50957 - Integer overflow
CVE-2020-27813		 CWE-190 Medium
No
No
 3.11.404-1.git.677.0e37db7.el7 25.02.2021 SB2020120224
SB2021052527
SB2023070702
and 3 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 3.11.374-1.git.647.9e78d83.el7 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU34130 - Permissions, Privileges, and Access Controls
CVE-2020-8559		 CWE-264 Medium
Available
No
 3.11.346-1.git.619.3bb8f35.el7 22.07.2020 SB2020072221
SB2020120203
SB2020121809
and 6 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 3.11.219-1.git.1.9b9b889.el7 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU35005 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1002102		 CWE-601 Low
No
No
 3.11.346-1.git.619.3bb8f35.el7 05.12.2019 SB2019120529
SB2020121809
SB2020010218
#VU30804 - Permissions, Privileges, and Access Controls
CVE-2019-11247		 CWE-264 High
No
No
 3.9.101-1.git.1.601c6d2.el7 29.08.2019 SB2019082915
SB2019080655
SB2019081556
and 3 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 3.9.101-1.git.1.601c6d2.el7 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 3.9.101-1.git.1.601c6d2.el7 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more


Showing elements 41 - 60 out of 52