Known vulnerabilities in OpenShift Developer Tools and Services - page 4

Vendor: Red Hat Inc.
Software: OpenShift Developer Tools and Services
Software CPE: cpe:2.3:a:red_hat:openshift_developer_tools_and_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 94
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Developer Tools and Services OpenShift Developer Tools and Services is affected by 94 known vulnerabilities: 27 high, 40 medium, 27 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75915 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-2491		 CWE-78 High
No
No
 - 09.05.2023 SB20230509106
SB2023051666
SB2023042426
and 17 more
#VU75486 - Improper input validation
CVE-2023-29007		 CWE-20 Low
Available
No
 - 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815		 CWE-345 Low
No
No
 - 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652		 CWE-59 Low
No
No
 - 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 - 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 - 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 - 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72246 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-22490		 CWE-59 Low
No
No
 - 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 31 more
#VU72245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-23946		 CWE-59 Medium
No
No
 - 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 28 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 - 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 4.9 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 4.9 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 - 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU69337 - Integer overflow
CVE-2022-42898		 CWE-190 Medium
No
No
 4.9 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 - 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU63283 - Memory corruption
CVE-2022-26716		 CWE-119 High
No
No
 4.9 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 36 more
#VU61335 - Use After Free
CVE-2022-22624		 CWE-416 High
No
No
 4.9 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more


Showing elements 61 - 80 out of 94