Known vulnerabilities in OpenShift Service Mesh 2.3.0 - page 3

Version: 2.3.0
Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OpenShift Service Mesh version 2.3.0 OpenShift Service Mesh 2.3.0 is affected by 84 vulnerabilities: 19 high, 48 medium, 17 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
2.3.2 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU71694 - Improper input validation
CVE-2022-3962
CWE-20 Low
No
No
2.3.1 31.01.2023 SB2023013110
SB2023013111
#VU71379 - Incorrect Regular Expression
CVE-2022-40897
CWE-185 Medium
No
No
2.3.2 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU70474 - Integer overflow
CVE-2022-47629
CWE-190 High
No
No
2.3.2, 2.4.8, 2.5.2 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
2.3.2 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU68514 - Improper input validation
CVE-2022-39278
CWE-20 Medium
No
No
2.3.1 19.10.2022 SB2022101980
SB2023013111
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
2.2.7, 2.3.1, 2.4.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880
CWE-20 Medium
No
No
2.2.7, 2.3.1, 2.4.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68376 - Integer overflow
CVE-2022-3515
CWE-190 High
No
No
2.3.1 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU67969 - Reachable Assertion
CVE-2022-42010
CWE-617 Low
No
No
2.3.1, 2.3.2 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 58 more
#VU67396 - Improper input validation
CVE-2022-27664
CWE-20 Medium
No
No
2.2.7, 2.3.1, 2.4.0 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23648
CWE-79 Medium
No
No
2.3.1 30.08.2022 SB2022083037
SB2022083038
SB2022110844
and 6 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709
CWE-79 Medium
No
No
2.3.1 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU66121 - Improper input validation
CVE-2022-32189
CWE-20 Medium
No
No
2.3.1, 2.4.0 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66065 - Resource exhaustion
CVE-2022-1962
CWE-400 Medium
No
No
2.2.2, 2.3.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
2.3.1, 2.4.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673
CWE-200 Low
No
No
2.3.1 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64075 - Out-of-bounds write
CVE-2022-1304
CWE-787 Low
No
No
2.3.1 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
2.3.1 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU61336 - Use After Free
CVE-2022-22628
CWE-416 High
No
No
2.3.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more


Showing elements 41 - 60 out of 84