Known vulnerabilities in Multicluster Engine for Kubernetes - page 6

Software CPE: cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Total vulnerabilities: 224
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Multicluster Engine for Kubernetes Multicluster Engine for Kubernetes is affected by 224 known vulnerabilities: 42 high, 138 medium, 44 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99614 - Improper input validation
CVE-2024-50602
CWE-20 Medium
No
No
2.3.8, 2.4.7, 2.5.8, 2.6.4 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU98817 - UNIX Symbolic Link (Symlink) Following
CVE-2024-9676
CWE-61 Low
No
No
2.3.8, 2.6.4 18.10.2024 SB2024101822
SB2024101823
SB2024101824
and 49 more
#VU98513 - Improper input validation
CVE-2024-48949
CWE-20 Medium
No
No
2.3.8, 2.4.6 14.10.2024 SB2024101490
SB20241014105
SB20241014106
and 25 more
#VU97217 - Resource exhaustion
CVE-2024-34158
CWE-400 Medium
No
No
2.3.8 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97215 - Resource exhaustion
CVE-2024-34155
CWE-400 Medium
No
No
2.3.8 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345
CWE-94 High
No
No
2.3.8, 2.4.6 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 159 more
#VU94711 - Resource exhaustion
CVE-2024-1975
CWE-400 Medium
No
No
2.3.8, 2.4.6 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737
CWE-399 Medium
No
No
2.3.8, 2.4.6 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU93866 - Memory corruption
CVE-2024-5564
CWE-119 Low
No
No
2.4.6 08.07.2024 SB2024070875
SB2024070878
SB2024070880
and 25 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
2.3.8, 2.4.6, 2.4.7, 2.5.8, 2.6.4, 2.7.4 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331
CWE-676 High
No
No
2.3.8, 2.4.6 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
2.4.6 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU88828 - Resource exhaustion
CVE-2024-3651
CWE-400 Medium
No
No
2.4.6, 2.5.8, 2.6.4 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU88533 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32487
CWE-78 Medium
No
No
2.4.6 15.04.2024 SB2024041531
SB2024041533
SB2024042949
and 63 more
#VU87808 - Insufficient Verification of Data Authenticity
CVE-2024-30203
CWE-345 High
No
No
2.3.8, 2.4.6 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 30 more
#VU87804 - Insufficient Verification of Data Authenticity
CVE-2024-30205
CWE-345 High
No
No
2.3.8, 2.4.6 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 32 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
2.4.6 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48624
CWE-78 Medium
No
No
2.4.6 28.02.2024 SB2024022820
SB2024022839
SB2024030503
and 60 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806
CWE-918 Medium
No
No
2.4.6, 2.5.8 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953
CWE-476 Medium
No
No
2.4.6 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more


Showing elements 101 - 120 out of 224