Known vulnerabilities in Multicluster Engine for Kubernetes - page 6

Software CPE: cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Multicluster Engine for Kubernetes Multicluster Engine for Kubernetes is affected by 224 known vulnerabilities: 42 high, 138 medium, 44 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100997 - Insecure Storage of Sensitive Information
CVE-2024-10041
CWE-922 Low
No
No
2.4.7, 2.7.2 27.11.2024 SB2024112540
SB2024112747
SB2024112748
and 38 more
#VU100922 - Inefficient Regular Expression Complexity
CVE-2024-45813
CWE-1333 Medium
No
No
2.6.4, 2.7.2 26.11.2024 SB2024112628
SB2024112636
SB2024120575
and 4 more
#VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-9675
CWE-22 Low
No
No
2.3.8, 2.6.4 21.10.2024 SB2024102103
SB2024102104
SB2024102107
and 51 more
#VU98817 - UNIX Symbolic Link (Symlink) Following
CVE-2024-9676
CWE-61 Low
No
No
2.3.8, 2.6.4 18.10.2024 SB2024101822
SB2024101823
SB2024101824
and 54 more
#VU98513 - Improper input validation
CVE-2024-48949
CWE-20 Medium
No
No
2.3.8, 2.4.6 14.10.2024 SB2024101490
SB20241014105
SB20241014106
and 25 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
2.6.4, 2.7.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97606 - Improper Verification of Cryptographic Signature
CVE-2024-42459
CWE-347 Medium
No
No
2.3.8, 2.4.6, 2.5.7, 2.6.3 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 23 more
#VU97605 - Improper Verification of Cryptographic Signature
CVE-2024-42460
CWE-347 Medium
No
No
2.3.8, 2.4.6, 2.5.7, 2.6.3 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97604 - Improper Verification of Cryptographic Signature
CVE-2024-42461
CWE-347 Medium
No
No
2.3.8, 2.4.6, 2.5.7, 2.6.3 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
2.7.2 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU95571 - Command injection
CVE-2024-6923
CWE-77 Medium
No
No
2.3.8, 2.4.6, 2.6.3 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345
CWE-94 High
No
No
2.3.8, 2.4.6 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032
CWE-684 Medium
No
No
2.3.8, 2.4.6, 2.6.3 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU94711 - Resource exhaustion
CVE-2024-1975
CWE-400 Medium
No
No
2.3.8, 2.4.6 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737
CWE-399 Medium
No
No
2.3.8, 2.4.6 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU88144 - Improper input validation
CVE-2024-28182
CWE-20 Medium
No
No
2.4.6, 2.7.2 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
2.3.8, 2.4.6, 2.7.2 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87808 - Insufficient Verification of Data Authenticity
CVE-2024-30203
CWE-345 High
No
No
2.3.8, 2.4.6 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 30 more
#VU87804 - Insufficient Verification of Data Authenticity
CVE-2024-30205
CWE-345 High
No
No
2.3.8, 2.4.6 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 32 more
#VU84507 - Resource exhaustion
CVE-2023-47108
CWE-400 Medium
No
No
2.6.4, 2.7.2 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more


Showing elements 101 - 120 out of 224