Known vulnerabilities in openshift-clients (Red Hat package) - page 9

Vendor: Red Hat Inc.

Software: openshift-clients (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift-clients_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 220

Public exploits: 19

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (220)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU56245 - Improper input validation CVE-2021-25735	CWE-20	Medium	Available	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	01.09.2021	SB2021090125 SB2021090126 SB2022083132 and 4 more
#VU56243 - Improper Authentication CVE-2021-3636	CWE-287	Low	No	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	01.09.2021	SB2021090123 SB2021090126 SB2022083132 and 1 more
#VU55143 - Integer overflow CVE-2021-33909	CWE-190	Low	Available	No	4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7, 4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8	21.07.2021	SB2021072106 SB2021072222 SB2021072223 and 63 more
#VU55034 - Uncontrolled Memory Allocation CVE-2021-33910	CWE-789	Low	Available	No	4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7, 4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8	20.07.2021	SB2021072031 SB2021072032 SB2021072206 and 31 more
#VU53837 - Permissions, Privileges, and Access Controls CVE-2021-3560	CWE-264	Low	Available	Exploited	4.7.0-202106252127.p0.git.8b4b094.el7, 4.7.0-202106252127.p0.git.8b4b094.el8	07.06.2021	SB2021060707 SB2021060712 SB2021060714 and 18 more
#VU53609 - Improper input validation CVE-2021-25217	CWE-20	Medium	No	No	4.7.0-202106252127.p0.git.8b4b094.el7, 4.7.0-202106252127.p0.git.8b4b094.el8	27.05.2021	SB2021052708 SB2021052808 SB2021052902 and 38 more
#VU53436 - Exposure of sensitive information to an unauthorized actor CVE-2021-25737	CWE-200	Low	No	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	24.05.2021	SB2021052409 SB2021060911 SB2021090126 and 4 more
#VU53152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-21648	CWE-79	Low	No	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	12.05.2021	SB2021051209 SB2021090126 SB2022083132 and 1 more
#VU52502 - Improper input validation CVE-2020-27218	CWE-20	Medium	No	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8, 4.6.0-202106160917.p0.git.99556b6.el7, 4.6.0-202106160917.p0.git.99556b6.el8	23.04.2021	SB2021042305 SB2021042635 SB2021063002 and 15 more
#VU52495 - Permissions, Privileges, and Access Controls CVE-2021-21645	CWE-264	Low	No	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52494 - Cross-Site Request Forgery (CSRF) CVE-2021-21644	CWE-352	Low	No	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52493 - Permissions, Privileges, and Access Controls CVE-2021-21643	CWE-264	Low	No	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52492 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-21642	CWE-611	Medium	No	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8	22.04.2021	SB2021042205 SB2021060101 SB2021063033 and 3 more
#VU52385 - Improper input validation CVE-2020-27223	CWE-20	Medium	Available	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8, 4.6.0-202106160917.p0.git.99556b6.el7, 4.6.0-202106160917.p0.git.99556b6.el8	21.04.2021	SB2021042107 SB2021063002 SB2021063034 and 19 more
#VU51994 - Improper Authentication CVE-2021-21640	CWE-287	Low	No	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	08.04.2021	SB2021040814 SB2021052527 SB2021062509 and 3 more
#VU51993 - Improper input validation CVE-2021-21639	CWE-20	Low	No	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	08.04.2021	SB2021040814 SB2021052527 SB2021062509 and 3 more
#VU51878 - Exposure of sensitive information to an unauthorized actor CVE-2021-28163	CWE-200	Medium	No	No	4.7.0-202105111743.p0.git.95881af.el7, 4.7.0-202105111743.p0.git.95881af.el8	01.04.2021	SB2021040179 SB2021050704 SB2021051321 and 27 more
#VU51876 - Resource exhaustion CVE-2021-28165	CWE-400	Medium	No	No	4.7.0-202105111743.p0.git.95881af.el7, 4.7.0-202105111743.p0.git.95881af.el8	01.04.2021	SB2021040179 SB2021042208 SB2021050704 and 56 more
#VU51595 - Permissions, Privileges, and Access Controls CVE-2021-21623	CWE-264	Medium	No	No	4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7, 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8	22.03.2021	SB2021032207 SB2021090126 SB2022083132 and 1 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-27216	CWE-362	Low	No	No	4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8, 4.6.0-202106160917.p0.git.99556b6.el7, 4.6.0-202106160917.p0.git.99556b6.el8	23.10.2020	SB2020121307 SB2020121308 SB2021012011 and 27 more

Showing elements 161 - 180 out of 220

Known vulnerabilities in openshift-clients (Red Hat package) - page 9

Breakdown by Severity Chart

Vulnerabilities (220)

Please verify you're human