Known vulnerabilities in openshift-clients (Red Hat package) - page 4

Software CPE: cpe:2.3:o:red_hat:openshift-clients_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 220
Public exploits: 19
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-clients (Red Hat package) openshift-clients (Red Hat package) is affected by 220 known vulnerabilities: 13 high, 136 medium, 71 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78481 - Permissions, Privileges, and Access Controls
CVE-2023-1260
CWE-264 Low
No
No
4.11.0-202307200522.p0.g7e1b2fb.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9 21.07.2023 SB2023072111
SB2023072112
SB2023072113
and 6 more
#VU78005 - Inadequate Encryption Strength
CVE-2023-3089
CWE-326 Medium
No
No
4.10.0-202306261054.p0.g22cf04a.assembly.stream.el7, 4.10.0-202306261054.p0.g22cf04a.assembly.stream.el8, 4.11.0-202306231116.p0.g2ae2303.assembly.stream.el8, 4.12.0-202306230041.p0.gea7c11a.assembly.stream.el8, 4.12.0-202306230041.p0.gea7c11a.assembly.stream.el9, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9, 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8, 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el9 06.07.2023 SB2023070602
SB2023070603
SB2023070604
and 34 more
#VU76234 - Cross-Site Request Forgery (CSRF)
CVE-2023-32980
CWE-352 Low
No
No
4.10.0-202306081029.p0.g3a7500d.assembly.stream.el7, 4.10.0-202306081029.p0.g3a7500d.assembly.stream.el8 17.05.2023 SB2023051750
SB2023062636
#VU76232 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32979
CWE-200 Low
No
No
4.10.0-202306081029.p0.g3a7500d.assembly.stream.el7, 4.10.0-202306081029.p0.g3a7500d.assembly.stream.el8 17.05.2023 SB2023051750
SB2023062636
#VU76230 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32977
CWE-79 Low
No
No
4.10.0-202306081029.p0.g3a7500d.assembly.stream.el7, 4.10.0-202306081029.p0.g3a7500d.assembly.stream.el8 17.05.2023 SB2023051727
SB2023061545
SB2023061946
and 1 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9, 4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8, 4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
4.10.0-202306261054.p0.g22cf04a.assembly.stream.el7, 4.10.0-202306261054.p0.g22cf04a.assembly.stream.el8, 4.11.0-202306231116.p0.g2ae2303.assembly.stream.el8, 4.12.0-202307200611.p0.g49844f7.assembly.stream.el8 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9, 4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8, 4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
4.10.0-202306081029.p0.g3a7500d.assembly.stream.el7, 4.10.0-202306081029.p0.g3a7500d.assembly.stream.el8 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74190 - Improper Access Control
CVE-2023-27561
CWE-284 Low
No
No
4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
4.10.0-202306081029.p0.g3a7500d.assembly.stream.el7, 4.10.0-202306081029.p0.g3a7500d.assembly.stream.el8 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
4.10.0-202306261054.p0.g22cf04a.assembly.stream.el7, 4.10.0-202306261054.p0.g22cf04a.assembly.stream.el8, 4.11.0-202306231116.p0.g2ae2303.assembly.stream.el8, 4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68897 - Resource exhaustion
CVE-2022-32149
CWE-400 Medium
No
No
4.12.0-202306090942.p0.g3c01edd.assembly.stream.el8, 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el9 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU67556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-32190
CWE-22 Medium
No
No
4.12.0-202306090942.p0.g3c01edd.assembly.stream.el8, 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el9 21.09.2022 SB2022091520
SB2022092146
SB2022092946
and 33 more
#VU64269 - Integer overflow
CVE-2022-28327
CWE-190 Low
No
No
4.11.0-202207291716.p0.g7075089.assembly.stream.el8, 4.11.0-202306231116.p0.g2ae2303.assembly.stream.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU62038 - Resource exhaustion
CVE-2022-23772
CWE-400 Medium
No
No
4.11.0-202207291716.p0.g7075089.assembly.stream.el8, 4.11.0-202306231116.p0.g2ae2303.assembly.stream.el8 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU25847 - Improper Access Control
CVE-2019-19921
CWE-284 Low
No
No
4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el8, 4.13.0-202306230038.p0.ge4c9a6a.assembly.stream.el9 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more


Showing elements 61 - 80 out of 220