Known vulnerabilities in OpenShift Service Mesh 2.3.0 - page 2
Vendor:
Red Hat Inc.
Software:
OpenShift Service Mesh
Version:
2.3.0
Software CPE:
cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
84
Public exploits:
6
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2.6.12
2.6.11
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.4
2.6.1
2.6.0
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
2.5.10
2.6.5
2.5.8
2.4.14
2.5.7
2.4.13
2.5.6
2.6.3
2.6.2
2.5.5
2.4.11
2.4.8
2.5.2
2.5.1
2.5.0
2.4.5
2.2.12
2.2.11
2.3.8
2.3.7
2.4.4
2.4.3
2.2.10
2.2.9
2.3.6
2.4.2
2.4.1
2.3.5
2.3.4
2.3.3
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.4.0
2.3.2
2.1.6
2.3.1
2.3.0
1.0
2.1.5.1
2.2.2
2.1.5
2.0.11
2.2.1
2.2.0
2.1.4
2.1.3
2.0.10
2.1.2.1
2.1.2
2.0.9
2.1.1
2.1.0
2.0.8
2.0.7.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
Vulnerabilities (84)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78005 - Inadequate Encryption Strength CVE-2023-3089 |
CWE-326 | Medium | 2.2.8, 2.3.5, 2.4.1 | 06.07.2023 |
SB2023070602 SB2023070603 SB2023070604 and 34 more |
||
| #VU77780 - Memory corruption CVE-2020-24736 |
CWE-119 | Low | 2.2.8, 2.2.10, 2.3.5, 2.4.1 | 29.06.2023 |
SB2023062903 SB2023062908 SB2023062968 and 45 more |
||
| #VU75741 - Improper input validation CVE-2023-1667 |
CWE-20 | Medium | 2.2.8, 2.2.10, 2.3.5, 2.4.1 | 04.05.2023 |
SB2023050456 SB2023050501 SB2023052441 and 75 more |
||
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 2.2.8, 2.3.5 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU72337 - Allocation of Resources Without Limits or Throttling CVE-2023-23916 |
CWE-770 | Medium | 2.3.2 | 16.02.2023 |
SB2023021668 SB2023021670 SB2023021671 and 89 more |
||
| #VU72125 - Inadequate Encryption Strength CVE-2023-0361 |
CWE-326 | Medium | 2.2.7, 2.2.8, 2.3.5, 2.4.1 | 11.02.2023 |
SB2023021103 SB2023021109 SB2023021561 and 88 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | 2.2.7, 2.2.8, 2.3.5, 2.4.1 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 2.2.7, 2.2.8, 2.3.5, 2.4.1 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 2.2.7, 2.2.8, 2.3.5, 2.4.1 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU70461 - Improper Privilege Management CVE-2022-4415 |
CWE-269 | Low | 2.3.2, 2.5.1 | 21.12.2022 |
SB2022122140 SB2022122735 SB2022122816 and 70 more |
||
| #VU70334 - Allocation of Resources Without Limits or Throttling CVE-2022-41717 |
CWE-770 | Medium | 2.3.2 | 14.12.2022 |
SB2022121432 SB2022121433 SB2022121435 and 185 more |
||
| #VU68858 - Off-by-one Error CVE-2021-46848 |
CWE-193 | Medium | 2.3.1, 2.3.2, 2.4.8, 2.5.2 | 31.10.2022 |
SB2022103141 SB2022103142 SB2022103143 and 84 more |
||
| #VU68829 - Resource Management Errors CVE-2022-40304 |
CWE-399 | Medium | 2.3.2 | 30.10.2022 |
SB2022103005 SB2022103006 SB2022103007 and 90 more |
||
| #VU68828 - Integer overflow CVE-2022-40303 |
CWE-190 | High | 2.3.2 | 30.10.2022 |
SB2022103005 SB2022103006 SB2022103007 and 88 more |
||
| #VU67971 - Use After Free CVE-2022-42012 |
CWE-416 | Low | 2.3.1, 2.3.2 | 06.10.2022 |
SB2022100645 SB2022100708 SB2022102733 and 57 more |
||
| #VU67970 - Out-of-bounds read CVE-2022-42011 |
CWE-125 | Low | 2.3.1, 2.3.2 | 06.10.2022 |
SB2022100645 SB2022100708 SB2022102733 and 57 more |
||
| #VU67969 - Reachable Assertion CVE-2022-42010 |
CWE-617 | Low | 2.3.1, 2.3.2 | 06.10.2022 |
SB2022100645 SB2022100708 SB2022102733 and 58 more |
||
| #VU67760 - Type conversion CVE-2020-10735 |
CWE-704 | Medium | 2.3.2 | 29.09.2022 |
SB2022092968 SB2022092970 SB2022093032 and 86 more |
||
| #VU67591 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-28861 |
CWE-601 | Low | 2.3.2 | 22.09.2022 |
SB2022092243 SB2022092244 SB2022093032 and 76 more |
||
| #VU67414 - Improper Validation of Array Index CVE-2022-35737 |
CWE-129 | Medium | 2.3.1, 2.3.2 | 15.09.2022 |
SB2022091537 SB2022092034 SB2022092682 and 72 more |
Showing elements 21 - 40 out of 84