Known vulnerabilities in OpenShift Pipelines - page 2

Vendor: Red Hat Inc.
Software: OpenShift Pipelines
Software CPE: cpe:2.3:a:red_hat:openshift_pipelines:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 36
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Pipelines OpenShift Pipelines is affected by 36 known vulnerabilities: 8 high, 22 medium, 6 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 1.10.6, 1.11.2, 1.12.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.10.6, 1.11.2, 1.12.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 655 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 1.10.6, 1.11.2, 1.12.1 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 1.10.6, 1.11.2, 1.12.1 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 1.10.6, 1.11.2, 1.12.1 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80931 - Resource exhaustion
CVE-2023-3341		 CWE-400 Medium
No
No
 1.10.6, 1.11.2, 1.12.1 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 1.10.6 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79878 - Incorrect Authorization
CVE-2023-3899		 CWE-863 Low
No
No
 1.10.6, 1.11.2 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU79561 - Out-of-bounds write
CVE-2023-4016		 CWE-787 High
No
No
 1.10.6 15.08.2023 SB2023081548
SB20230821203
SB2023082925
and 49 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 1.10.6, 1.11.2 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU75482 - Integer overflow
CVE-2022-48468		 CWE-190 High
No
No
 1.10.6 25.04.2023 SB2022072825
SB2023042551
SB2023050992
and 50 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.10.6, 1.11.2 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 1.10.6 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 1.10.6 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 1.10.6 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 1.10.6 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more


Showing elements 21 - 40 out of 36