Known vulnerabilities in Multicluster Engine for Kubernetes - page 4
Vendor:
Red Hat Inc.
Software:
Multicluster Engine for Kubernetes
Software CPE:
cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
224
Public exploits:
15
Known exploited (KEV):
4
Breakdown by Severity Chart
2.10.4
2.6.12
2.8.8
2.17.0
2.8.7
2.11.2
2.10.3
2.9.4
2.6.11
2.8.6
2.11
2.11.1
2.10.2
2.7.10
2.9
2.10
2.10.1
2.8
2.8.4
2.6
2.7
2.9.1
2.7.6
2.8.3
2.6.8
2.7.5
2.4.9
2.6.7
2.5.9
2.7.4
2.8.1
2.6.5
2.7.3
2.5.8
2.4.7
2.6.4
2.7.2
2.3.8
2.4.6
2.6.3
2.5.7
2.2.9
2.2.8
2.1.9
2.3.3
2.3.2
2.1.8
2.3.1
2.3.0
2.2.7
2.2.6
2.2.5
2.0.9
2.1.7
2.2.4
2.0.8
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.2.3
2.2.2
2.2.1
2.2.0
2.0.2
2.0.1
2.1.1
2.1
2.0
Vulnerabilities (224)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU103771 - Improper Authentication CVE-2024-12797 |
CWE-287 | Medium | 2.6.7, 2.7.4 | 11.02.2025 |
SB2025021187 SB20250211108 SB20250211159 and 60 more |
||
| #VU102730 - Use of Uninitialized Variable CVE-2024-12085 |
CWE-457 | Medium | 2.4.7, 2.6.7, 2.7.4 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 92 more |
||
| #VU100912 - Improper Authentication CVE-2024-10963 |
CWE-287 | Medium | 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 25.11.2024 |
SB2024112540 SB2024112541 SB2024112542 and 56 more |
||
| #VU100516 - Improper input validation CVE-2024-11168 |
CWE-20 | Medium | 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.3, 2.7.4 | 15.11.2024 |
SB2024111507 SB2024111526 SB2024111527 and 76 more |
||
| #VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-9287 |
CWE-78 | Low | 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.3, 2.7.4 | 28.10.2024 |
SB2024102836 SB2024102838 SB20241101111 and 117 more |
||
| #VU94063 - Use of a Broken or Risky Cryptographic Algorithm CVE-2024-3596 |
CWE-327 | Medium | 2.3.8, 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 10.07.2024 |
SB2024071018 SB2024071019 SB2024071020 and 114 more |
||
| #VU89351 - Insufficient Verification of Data Authenticity CVE-2024-34397 |
CWE-345 | Low | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 10.05.2024 |
SB2024051042 SB2024051043 SB2024051044 and 88 more |
||
| #VU88211 - Resource exhaustion CVE-2024-2511 |
CWE-400 | Medium | 2.5.8, 2.6.4, 2.7.4 | 08.04.2024 |
SB2024040853 SB2024042960 SB2024051069 and 91 more |
||
| #VU87672 - Improper input validation CVE-2024-28835 |
CWE-20 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 20.03.2024 |
SB2024032057 SB2024032058 SB2024032059 and 71 more |
||
| #VU87671 - Cryptographic Issues CVE-2024-28834 |
CWE-310 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 20.03.2024 |
SB2024032057 SB2024032058 SB2024032059 and 111 more |
||
| #VU87339 - Information Exposure Through Timing Discrepancy CVE-2024-2236 |
CWE-208 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.4 | 11.03.2024 |
SB2024031137 SB2024031141 SB2024111242 and 59 more |
||
| #VU84985 - Out-of-bounds read CVE-2023-7104 |
CWE-125 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 04.01.2024 |
SB2024010417 SB2024010420 SB2024010516 and 108 more |
||
| #VU84540 - Unchecked Return Value CVE-2023-6918 |
CWE-252 | Low | 2.7.4 | 19.12.2023 |
SB2023121906 SB2023121910 SB2023121911 and 63 more |
||
| #VU84538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-6004 |
CWE-78 | Medium | 2.7.4 | 19.12.2023 |
SB2023121905 SB2023121906 SB2023121910 and 58 more |
||
| #VU80421 - Out-of-bounds read CVE-2022-48554 |
CWE-125 | Low | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 05.09.2023 |
SB2023090535 SB2023090536 SB2023091257 and 52 more |
||
| #VU79296 - Insufficient Verification of Data Authenticity CVE-2023-37920 |
CWE-345 | Medium | 2.3.8, 2.4.6, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 09.08.2023 |
SB2023080939 SB20230821166 SB2023090820 and 89 more |
||
| #VU77812 - Missing release of memory after effective lifetime CVE-2023-33460 |
CWE-401 | Medium | 2.7.4 | 29.06.2023 |
SB2023062940 SB2023081424 SB2023082180 and 19 more |
||
| #VU75482 - Integer overflow CVE-2022-48468 |
CWE-190 | High | 2.5.8, 2.7.4 | 25.04.2023 |
SB2022072825 SB2023042551 SB2023050992 and 50 more |
||
| #VU75141 - Memory corruption CVE-2023-29491 |
CWE-119 | Low | 2.1.9, 2.2.9, 2.3.2, 2.3.3, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 14.04.2023 |
SB2023041454 SB2023052328 SB2023052346 and 132 more |
||
| #VU63553 - Integer overflow CVE-2021-43618 |
CWE-190 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 24.05.2022 |
SB2021121654 SB2022052401 SB2021120223 and 85 more |
Showing elements 61 - 80 out of 224