Known vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift

Vendor: Red Hat Inc.
Software: Kube Descheduler Operator for Red Hat OpenShift
Software CPE: cpe:2.3:a:red_hat:kube_descheduler_operator_for_red_hat_openshift:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 22
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kube Descheduler Operator for Red Hat OpenShift Kube Descheduler Operator for Red Hat OpenShift is affected by 22 known vulnerabilities: 2 high, 18 medium, 2 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 5.0.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 5.0.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 5.0.2, 5.1.0 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 5.0.2, 5.1.0 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 5.0.2, 5.1.0 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 5.0.2 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 5.1.0 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 5.1.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 5.1.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 5.0.2, 5.1.0 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 5.1.0 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788		 CWE-835 Medium
No
No
 5.1.0 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 5.0.2, 5.1.0 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 5.0.2, 5.1.0 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 5.0.1, 5.0.2 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 5.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 5.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 5.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 5.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 5.0.2, 5.1.0 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more


Showing elements 1 - 20 out of 22