Known vulnerabilities in Multicluster Engine for Kubernetes - page 3

Software CPE: cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Multicluster Engine for Kubernetes Multicluster Engine for Kubernetes is affected by 224 known vulnerabilities: 42 high, 138 medium, 44 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113533 - Use After Free
CVE-2025-7425
CWE-416 High
No
No
2.6.8 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Available
No
2.6.8 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111872 - Resource Management Errors
CVE-2025-5702
CWE-399 Medium
No
No
2.6.8 24.06.2025 SB2025062437
SB2025062438
SB2025062439
and 11 more
#VU105983 - Resource exhaustion
CVE-2025-30204
CWE-400 Medium
No
No
2.4.9, 2.5.9, 2.6.8, 2.8.3, 2.8.4 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105900 - Memory corruption
CVE-2025-25724
CWE-119 High
No
No
2.6.8 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
2.4.9, 2.5.9, 2.6.7, 2.6.8 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
2.4.9, 2.5.9, 2.6.7, 2.6.8 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103771 - Improper Authentication
CVE-2024-12797
CWE-287 Medium
No
No
2.6.7, 2.7.4 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 58 more
#VU103687 - Memory corruption
CVE-2025-0395
CWE-119 Medium
No
No
2.4.9, 2.5.9, 2.6.7 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
2.4.9, 2.5.9, 2.6.7 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU103436 - Resource exhaustion
CVE-2024-11187
CWE-400 Medium
No
No
2.4.9, 2.5.9, 2.6.7, 2.7.4 29.01.2025 SB2025012962
SB2025012964
SB2025012965
and 83 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747
CWE-362 Low
No
No
2.4.9, 2.5.9, 2.6.7, 2.6.8 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088
CWE-22 Medium
No
No
2.4.9, 2.5.9, 2.6.7, 2.6.8 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
2.4.9, 2.5.9, 2.6.7, 2.6.8 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
2.4.7, 2.6.7, 2.7.4 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236
CWE-208 Medium
No
No
2.5.8, 2.6.4, 2.6.7, 2.7.4 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 58 more
#VU84540 - Unchecked Return Value
CVE-2023-6918
CWE-252 Low
No
No
2.7.4 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU84538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-6004
CWE-78 Medium
No
No
2.7.4 19.12.2023 SB2023121905
SB2023121906
SB2023121910
and 58 more
#VU77812 - Missing release of memory after effective lifetime
CVE-2023-33460
CWE-401 Medium
No
No
2.7.4 29.06.2023 SB2023062940
SB2023081424
SB2023082180
and 19 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
2.5.9, 2.6.7, 2.7.4 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 41 - 60 out of 224