Known vulnerabilities in Node Health Check Operator

Vendor: Red Hat Inc.
Software: Node Health Check Operator
Software CPE: cpe:2.3:a:red_hat:node_health_check_operator:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 35
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Node Health Check Operator Node Health Check Operator is affected by 35 known vulnerabilities: 7 high, 20 medium, 8 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79878 - Incorrect Authorization
CVE-2023-3899		 CWE-863 Low
No
No
 0.4.1 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU77780 - Memory corruption
CVE-2020-24736		 CWE-119 Low
No
No
 0.4.1 29.06.2023 SB2023062903
SB2023062908
SB2023062968
and 45 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 0.4.1 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 113 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 0.4.1 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 0.4.1 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75915 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-2491		 CWE-78 High
No
No
 0.4.1 09.05.2023 SB20230509106
SB2023051666
SB2023042426
and 17 more
#VU75741 - Improper input validation
CVE-2023-1667		 CWE-20 Medium
No
No
 0.4.1 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 75 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 0.4.1 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 0.4.1 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 0.4.1 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 0.4.1 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 0.4.1 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 0.4.1 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 0.4.1 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 0.4.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 0.4.1 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 0.4.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 0.4.1 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 0.4.1 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 0.4.1 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more


Showing elements 1 - 20 out of 35