Known vulnerabilities in Multicluster GlobalHub

Vendor: Red Hat Inc.
Software: Multicluster GlobalHub
Software CPE: cpe:2.3:a:red_hat:multicluster_globalhub:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 56
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Multicluster GlobalHub Multicluster GlobalHub is affected by 56 known vulnerabilities: 7 high, 31 medium, 18 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118141 - Incorrect Default Permissions
CVE-2024-25621		 CWE-276 Low
No
No
 1.4.3, 1.5.2 06.11.2025 SB2025110610
SB2025111276
SB2025112826
and 16 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 1.2.3, 1.4.1 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176		 CWE-121 High
No
No
 1.4.1 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 1.2.2, 1.3.3 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 1.2.2, 1.3.3 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 107 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 1.2.2, 1.3.3 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 1.2.2, 1.3.3 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104044 - Resource exhaustion
CVE-2024-12243		 CWE-400 Medium
No
No
 1.4.1 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 1.4.1 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103812 - Improper input validation
CVE-2025-0938		 CWE-20 Low
No
No
 1.4.1 11.02.2025 SB20250211115
SB20250211130
SB20250211131
and 76 more
#VU103687 - Memory corruption
CVE-2025-0395		 CWE-119 Medium
No
No
 1.2.3 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103504 - Out-of-bounds write
CVE-2025-24528		 CWE-787 Medium
No
No
 1.4.1 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU103502 - Use After Free
CVE-2022-49043		 CWE-416 Medium
No
No
 1.2.2 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 1.2.1, 1.3.2 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 1.2.2 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 1.2.3 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 1.4.1 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 116 more
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236		 CWE-208 Medium
No
No
 1.2.3 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 58 more
#VU80506 - Use After Free
CVE-2023-4752		 CWE-416 Low
No
No
 1.4.1 06.09.2023 SB2023090645
SB2023090649
SB2023090650
and 32 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 1.2.2, 1.3.3 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 1 - 20 out of 56