Known vulnerabilities in OpenShift Developer Tools and Services - page 3

Vendor: Red Hat Inc.
Software: OpenShift Developer Tools and Services
Software CPE: cpe:2.3:a:red_hat:openshift_developer_tools_and_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 94
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Developer Tools and Services OpenShift Developer Tools and Services is affected by 94 known vulnerabilities: 27 high, 40 medium, 27 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 - 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU78257 - Session Fixation
CVE-2023-37946		 CWE-384 High
No
No
 - 14.07.2023 SB2023071418
SB2024021214
SB2024021215
and 1 more
#VU72076 - Incorrect Authorization
CVE-2020-7692		 CWE-863 High
No
No
 - 08.02.2023 SB2020070955
SB2023020889
SB2023022307
and 9 more
#VU71499 - Permissions, Privileges, and Access Controls
CVE-2023-24422		 CWE-264 Medium
No
No
 - 25.01.2023 SB2023012504
SB2023041270
SB2023041272
and 14 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69585 - Integer overflow
CVE-2022-3970		 CWE-190 High
No
No
 - 25.11.2022 SB2022112501
SB2022112507
SB2022112821
and 33 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 4.9 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68817 - Out-of-bounds write
CVE-2022-3627		 CWE-787 High
No
No
 - 28.10.2022 SB2022102808
SB2022111719
SB2022112821
and 24 more
#VU68601 - Cross-Site Request Forgery (CSRF)
CVE-2022-43408		 CWE-352 Low
No
No
 - 24.10.2022 SB2022102418
SB2023020889
SB2023022307
and 4 more
#VU68600 - Cross-Site Request Forgery (CSRF)
CVE-2022-43407		 CWE-352 Low
No
No
 - 24.10.2022 SB2022102419
SB2023020889
SB2023022307
and 4 more
#VU68598 - Protection Mechanism Failure
CVE-2022-43405		 CWE-693 Medium
No
No
 - 24.10.2022 SB2022102422
SB2023020889
SB2023022307
and 4 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 - 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 - 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67545 - Resource Management Errors
CVE-2022-2795		 CWE-399 Medium
No
No
 - 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU67416 - Use After Free
CVE-2021-3782		 CWE-416 Low
No
No
 - 15.09.2022 SB2022091539
SB2022091541
SB2022100346
and 12 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 4.9 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU64075 - Out-of-bounds write
CVE-2022-1304		 CWE-787 Low
No
No
 4.9 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU62492 - Origin Validation Error
CVE-2021-26291		 CWE-346 High
No
No
 - 22.04.2022 SB2021042333
SB2022042228
SB2022072038
and 15 more


Showing elements 41 - 60 out of 94