Known vulnerabilities in openshift-ansible (Red Hat package) - page 11

Vendor: Red Hat Inc.
Software: openshift-ansible (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 222
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 222 known vulnerabilities: 18 high, 138 medium, 66 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26474 - Uncontrolled Memory Allocation
CVE-2020-8552		 CWE-789 Medium
No
No
 4.3.9-202003230116.git.0.6124c7d.el7 31.03.2020 SB2020033111
SB2020040174
SB2020042251
and 6 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2163		 CWE-79 Low
No
No
 4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7 26.03.2020 SB2020032622
SB2020032668
SB2020061738
and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2162		 CWE-79 Low
No
No
 4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7 26.03.2020 SB2020032622
SB2020032667
SB2020061738
and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2161		 CWE-79 Low
No
No
 4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7 26.03.2020 SB2020032622
SB2020032662
SB2020061738
and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF)
CVE-2020-2160		 CWE-352 Low
No
No
 4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7 26.03.2020 SB2020032622
SB2020032661
SB2020061738
and 1 more
#VU25501 - Use After Free
CVE-2020-8945		 CWE-416 High
No
No
 4.3.10-202003300415.git.0.6fe3ef9.el7 21.02.2020 SB2020022110
SB2020031116
SB2020031126
and 23 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039		 CWE-122 Low
No
No
 4.3.1-202001310552.git.174.dcdb91b.el7 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25457 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7211		 CWE-22 Low
No
No
 4.3.1-202001310552.git.174.dcdb91b.el7 19.02.2020 SB2020021912
SB2020021193
#VU24764 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-2105		 CWE-451 Low
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013005
SB20200310153
#VU24763 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2104		 CWE-200 Low
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013005
SB20200310153
#VU24762 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2103		 CWE-200 Low
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013005
SB20200310153
#VU24761 - Cryptographic Issues
CVE-2020-2102		 CWE-310 Medium
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013005
SB20200310153
#VU24760 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2101		 CWE-200 Medium
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013005
SB20200310153
#VU24759 - Resource Management Errors
CVE-2020-2100		 CWE-399 Medium
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013005
SB20200310153
#VU24758 - Improper Authentication
CVE-2020-2099		 CWE-287 High
No
No
 4.3.5-202002280657.git.1.e4f02b3.el7 30.01.2020 SB2020013004
SB20200310153
#VU21780 - Improper Certificate Validation
CVE-2019-11324		 CWE-295 Medium
Available
No
 4.3.28-202006270952.p0.git.0.c07ec65.el7, 4.4.0-202006271254.p0.git.0.d256229.el7 15.10.2019 SB2019041823
SB2020031827
SB2019091504
and 19 more
#VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-10392		 CWE-78 Medium
No
No
 4.1.37-202002280447.git.1.bb180eb.el7, 4.2.20-202002140432.git.187.2308b53.el7, 4.3.3-202002142331.git.173.bb0b5a1.el7 16.09.2019 SB2019091607
SB2020061842
SB2020022451
and 2 more
#VU30806 - Permissions, Privileges, and Access Controls
CVE-2019-11249		 CWE-264 Medium
No
No
 4.1.16-201909090609.git.162.a0800db.el7 29.08.2019 SB2019082915
SB2019080656
SB2019103060
and 2 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 4.1.17-201909170941.git.162.79c271c.el7 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 4.1.17-201909170941.git.162.79c271c.el7 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more


Showing elements 201 - 220 out of 222