Known vulnerabilities in Multicluster Engine for Kubernetes - page 11

Software CPE: cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Multicluster Engine for Kubernetes Multicluster Engine for Kubernetes is affected by 224 known vulnerabilities: 42 high, 138 medium, 44 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75367 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2023-30547
CWE-74 Medium
Available
No
2.0.7, 2.1.5, 2.2.3 20.04.2023 SB2023042016
SB2023042019
SB2023042047
and 5 more
#VU75366 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29199
CWE-913 Medium
Available
No
2.0.7, 2.1.5, 2.2.3 20.04.2023 SB2023042015
SB2023042019
SB2023042047
and 7 more
#VU74606 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29017
CWE-913 High
Available
No
2.0.7, 2.1.5, 2.2.3 10.04.2023 SB2023041004
SB2023041839
SB2023042019
and 9 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303
CWE-122 High
No
No
2.1.6 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU67205 - Improper Access Control
CVE-2022-36067
CWE-284 High
Available
No
2.0.2, 2.1.1 13.09.2022 SB2022091301
SB2022091302
SB2022091303
and 5 more
#VU66757 - Use After Free
CVE-2022-2526
CWE-416 Medium
No
No
2.0.2, 2.1 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
2.0.2, 2.1 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU66070 - Resource exhaustion
CVE-2022-30633
CWE-400 Medium
No
No
2.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635
CWE-400 Medium
No
No
2.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632
CWE-400 Medium
No
No
2.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148
CWE-254 Medium
No
No
2.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
2.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66062 - Resource exhaustion
CVE-2022-30631
CWE-400 Medium
No
No
2.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
2.0.2, 2.1 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
2.0.2, 2.1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
2.0.2, 2.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
2.0.2, 2.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
2.0.2, 2.1 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
2.0.2, 2.1 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
2.0.2, 2.1 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more


Showing elements 201 - 220 out of 224