Known vulnerabilities in OpenShift Logging - page 37

Software CPE: cpe:2.3:a:red_hat:openshift_logging:*:*:*:*:*:*:*:*
Total vulnerabilities: 810
Public exploits: 50
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Logging OpenShift Logging is affected by 810 known vulnerabilities: 2 critical, 100 high, 218 medium, 490 low Critical High Medium Low

Vulnerabilities (810)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66757 - Use After Free
CVE-2022-2526
CWE-416 Medium
No
No
5.3.11, 5.4.5, 5.5.1 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
5.3.11, 5.3.12, 5.4.5, 5.5.1 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU66066 - Security Features
CVE-2022-32148
CWE-254 Medium
No
No
5.4.5, 5.5.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
5.4.5, 5.5.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64909 - Improper Verification of Cryptographic Signature
CVE-2022-34903
CWE-347 Medium
No
No
5.3.12, 5.3.14, 5.5.5 04.07.2022 SB2022070429
SB2022070443
SB2022070521
and 58 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
5.3.11, 5.3.12, 5.4.5, 5.5.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
5.3.11, 5.3.12, 5.4.5, 5.5.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64668 - Use After Free
CVE-2022-32250
CWE-416 Low
Available
No
- 24.06.2022 SB2022062427
SB2022062437
SB2022062440
and 57 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64508 - Out-of-bounds read
CVE-2022-1927
CWE-125 Low
No
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 20.06.2022 SB2022062022
SB2022080332
SB2022080610
and 49 more
#VU64506 - Out-of-bounds write
CVE-2022-1897
CWE-787 Low
No
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 20.06.2022 SB2022062022
SB2022070807
SB2022080332
and 48 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125
CWE-200 Low
No
No
5.3.12 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166
CWE-200 Low
No
No
5.3.12 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012
CWE-401 Medium
No
No
- 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU63487 - Out-of-bounds write
CVE-2022-1785
CWE-787 High
No
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 20.05.2022 SB2022052017
SB2022062022
SB2022063027
and 47 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
5.3.11, 5.3.14, 5.4.5, 5.5.5 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62574 - Improper Certificate Validation
CVE-2022-0759
CWE-295 Medium
No
No
- 25.04.2022 SB2022042553
SB2022081846
SB2023112747
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
5.2.10, 5.3.7, 5.4.1 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more


Showing elements 721 - 740 out of 810