Known vulnerabilities in openshift-ansible (Red Hat package) - page 8

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 223
Public exploits: 17
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 223 known vulnerabilities: 18 high, 139 medium, 66 low Critical High Medium Low

Vulnerabilities (223)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76236 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32981
CWE-22 Medium
No
No
4.10.0-202306081029.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306081029.p0.g72c7be6.assembly.stream.el8 17.05.2023 SB2023051751
SB2023061545
SB2023061946
and 1 more
#VU76234 - Cross-Site Request Forgery (CSRF)
CVE-2023-32980
CWE-352 Low
No
No
4.10.0-202306081029.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306081029.p0.g72c7be6.assembly.stream.el8 17.05.2023 SB2023051750
SB2023062636
#VU76232 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32979
CWE-200 Low
No
No
4.10.0-202306081029.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306081029.p0.g72c7be6.assembly.stream.el8 17.05.2023 SB2023051750
SB2023062636
#VU76230 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32977
CWE-79 Low
No
No
4.10.0-202306081029.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306081029.p0.g72c7be6.assembly.stream.el8 17.05.2023 SB2023051727
SB2023061545
SB2023061946
and 1 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861
CWE-200 Medium
No
No
4.13.0-202305301841.p0.g148be47.assembly.stream.el8, 4.13.0-202305301841.p0.g148be47.assembly.stream.el9 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
4.10.0-202306081029.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306081029.p0.g72c7be6.assembly.stream.el8 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU70537 - Out-of-bounds read
CVE-2022-46149
CWE-125 Medium
No
No
4.12.0-202303211955.p0.gab53575.assembly.stream.el8 29.12.2022 SB2022122902
SB2022122903
SB2023032960
and 8 more
#VU70478 - Improper input validation
CVE-2022-4318
CWE-20 Low
No
No
4.11.0-202303240327.p0.gdf73941.assembly.stream.el8 23.12.2022 SB2022122317
SB2023030858
SB2023040489
and 3 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
4.10.0-202302072053.p0.g72c7be6.assembly.stream.el7, 4.10.0-202302072053.p0.g72c7be6.assembly.stream.el8 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 125 more
#VU66121 - Improper input validation
CVE-2022-32189
CWE-20 Medium
No
No
4.11.0-202211072116.p0.gdf73941.assembly.stream.el8 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU64604 - Observable discrepancy
CVE-2022-34174
CWE-203 Medium
No
No
4.10.0-202302072053.p0.g72c7be6.assembly.stream.el7, 4.10.0-202302072053.p0.g72c7be6.assembly.stream.el8 23.06.2022 SB2022062312
SB2023011328
SB2023021602
and 5 more
#VU64008 - Resource exhaustion
CVE-2022-1708
CWE-400 Medium
No
No
3.11.715-1.git.0.9151060.el7 07.06.2022 SB2022060707
SB2022061334
SB2022061627
and 15 more
#VU60643 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25179
CWE-61 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021608
SB2022032826
SB2022032910
and 4 more
#VU60641 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25183
CWE-94 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60640 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25182
CWE-94 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25174
CWE-78 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60635 - Exposure of sensitive information to an unauthorized actor
CVE-2022-25180
CWE-200 Low
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021606
SB2022032826
SB2022032910
and 4 more
#VU60634 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25176
CWE-61 Medium
No
No
3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7 16.02.2022 SB2022021606
SB2022032826
SB2022032910
and 4 more
#VU20201 - Resource exhaustion
CVE-2019-9514
CWE-400 Medium
No
No
4.1.17-201909170941.git.162.79c271c.el7 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 81 more
#VU20200 - Resource exhaustion
CVE-2019-9512
CWE-400 Medium
No
No
4.1.17-201909170941.git.162.79c271c.el7 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 74 more


Showing elements 141 - 160 out of 223