Known vulnerabilities in openshift-ansible (Red Hat package) - page 6

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 222
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 222 known vulnerabilities: 18 high, 138 medium, 66 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64008 - Resource exhaustion
CVE-2022-1708
CWE-400 Medium
No
No
3.11.715-1.git.0.9151060.el7 07.06.2022 SB2022060707
SB2022061334
SB2022061627
and 15 more
#VU61439 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-0811
CWE-94 Medium
No
No
4.6.0-202202251050.p0.g87e9f0c.assembly.stream.el7, 4.8.0-202203100145.p0.gfccb320.assembly.stream.el7 17.03.2022 SB2022031714
SB2022031723
SB2022032225
and 12 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0711
CWE-835 Medium
No
No
4.8.0-202203240836.p0.gfccb320.assembly.stream.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 14.03.2022 SB2022031420
SB2022031505
SB2022032910
and 8 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921
CWE-185 Medium
No
No
4.10.0-202207192015.p0.g1e68436.assembly.stream.el7, 4.10.0-202207192015.p0.g1e68436.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU60644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-25184
CWE-200 Low
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021609
SB2022032826
SB2022032910
and 4 more
#VU60643 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25179
CWE-61 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021608
SB2022032826
SB2022032910
and 4 more
#VU60642 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25175
CWE-78 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021608
SB2022032826
SB2022032910
and 4 more
#VU60641 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25183
CWE-94 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60640 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25182
CWE-94 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60639 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25181
CWE-94 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60638 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25178
CWE-61 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60637 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25177
CWE-61 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25174
CWE-78 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60635 - Exposure of sensitive information to an unauthorized actor
CVE-2022-25180
CWE-200 Low
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021606
SB2022032826
SB2022032910
and 4 more
#VU60634 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25176
CWE-61 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021606
SB2022032826
SB2022032910
and 4 more
#VU60633 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25173
CWE-78 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021606
SB2022032826
SB2022032910
and 4 more
#VU60527 - Resource exhaustion
CVE-2021-43859
CWE-400 Medium
No
No
3.11.685-1.git.0.a9090ac.el7 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU59042 - Resource exhaustion
CVE-2021-44717
CWE-400 Medium
No
No
4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7, 4.10.0-202203112237.p0.g7ca0181.assembly.stream.el7 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716
CWE-20 Medium
No
No
4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7, 4.10.0-202203112237.p0.g7ca0181.assembly.stream.el7 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21684
CWE-79 Low
No
No
4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7 08.10.2021 SB2021100806
SB2023022165
SB2022031044
and 1 more


Showing elements 101 - 120 out of 222