Known vulnerabilities in Custom Metrics Autoscaler Operator for Red Hat OpenShift

Vendor: Red Hat Inc.
Software: Custom Metrics Autoscaler Operator for Red Hat OpenShift
Software CPE: cpe:2.3:a:red_hat:custom_metrics_autoscaler_operator_for_red_hat_openshift:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 65
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Custom Metrics Autoscaler Operator for Red Hat OpenShift Custom Metrics Autoscaler Operator for Red Hat OpenShift is affected by 65 known vulnerabilities: 5 high, 45 medium, 15 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 2.14.1-467 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 2.14.1-467 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 2.14.1-467 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 2.12.1-394 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 2.14.1-467 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 2.12.1-394 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 2.12.1-394 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 2.12.1-394 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 2.12.1-394 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 2.12.1-394 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 2.12.1-394 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 2.12.1-394 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85658 - Insufficient Verification of Data Authenticity
CVE-2023-7008		 CWE-345 Medium
No
No
 2.12.1-394 22.01.2024 SB2024012238
SB2024012239
SB2024012240
and 38 more
#VU85399 - Resource Management Errors
CVE-2023-6237		 CWE-399 Low
No
No
 2.12.1-394 15.01.2024 SB2024011522
SB2024012250
SB2024012612
and 53 more
#VU85170 - State Issues
CVE-2023-6129		 CWE-371 Medium
No
No
 2.12.1-394 09.01.2024 SB2024010929
SB2024012250
SB2024012612
and 69 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 2.12.1-394 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU80421 - Out-of-bounds read
CVE-2022-48554		 CWE-125 Low
No
No
 2.12.1-394 05.09.2023 SB2023090535
SB2023090536
SB2023091257
and 52 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 2.12.1-394 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 2.12.1-394 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78265 - Improper Authentication
CVE-2023-2975		 CWE-287 Low
No
No
 2.12.1-394 15.07.2023 SB2023071506
SB2023072844
SB2023072846
and 37 more


Showing elements 1 - 20 out of 65