Known vulnerabilities in openshift-ansible (Red Hat package) - page 7

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 223
Public exploits: 17
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 223 known vulnerabilities: 18 high, 139 medium, 66 low Critical High Medium Low

Vulnerabilities (223)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
4.14.0-202310062327.p0.gf781421.assembly.stream.el8, 4.14.0-202310062327.p0.gf781421.assembly.stream.el9 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 53 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
4.14.0-202310062327.p0.gf781421.assembly.stream.el8, 4.14.0-202310062327.p0.gf781421.assembly.stream.el9 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 54 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319
CWE-79 Medium
No
No
4.14.0-202310062327.p0.gf781421.assembly.stream.el8, 4.14.0-202310062327.p0.gf781421.assembly.stream.el9 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU78481 - Permissions, Privileges, and Access Controls
CVE-2023-1260
CWE-264 Low
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 21.07.2023 SB2023072111
SB2023072112
SB2023072113
and 6 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
4.10.0-202306170106.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306170106.p0.g72c7be6.assembly.stream.el8, 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74190 - Improper Access Control
CVE-2023-27561
CWE-284 Low
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
4.10.0-202306081029.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306081029.p0.g72c7be6.assembly.stream.el8 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU68897 - Resource exhaustion
CVE-2022-32149
CWE-400 Medium
No
No
4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880
CWE-20 Medium
No
No
4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879
CWE-399 Medium
No
No
4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-32190
CWE-22 Medium
No
No
4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8 21.09.2022 SB2022091520
SB2022092146
SB2022092946
and 33 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
4.11.0-202208111716.p0.gdf73941.assembly.stream.el8, 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU25847 - Improper Access Control
CVE-2019-19921
CWE-284 Low
No
No
4.13.0-202306230038.p0.g148be47.assembly.stream.el8, 4.13.0-202306230038.p0.g148be47.assembly.stream.el9 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more


Showing elements 121 - 140 out of 223