Known vulnerabilities in OpenShift Service Mesh 2.3.0 - page 4

Version: 2.3.0
Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OpenShift Service Mesh version 2.3.0 OpenShift Service Mesh 2.3.0 is affected by 84 vulnerabilities: 19 high, 48 medium, 17 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71686 - Insufficient Entropy
CVE-2021-4238
CWE-331 Low
No
No
2.1.6, 2.3.1 31.01.2023 SB2023013107
SB2023013111
SB2023013113
and 22 more
#VU69337 - Integer overflow
CVE-2022-42898
CWE-190 Medium
No
No
2.3.1 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more
#VU68514 - Improper input validation
CVE-2022-39278
CWE-20 Medium
No
No
2.3.1 19.10.2022 SB2022101980
SB2023013111
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
2.2.7, 2.3.1, 2.4.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880
CWE-20 Medium
No
No
2.2.7, 2.3.1, 2.4.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879
CWE-399 Medium
No
No
2.3.1, 2.4.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU68376 - Integer overflow
CVE-2022-3515
CWE-190 High
No
No
2.3.1 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU67396 - Improper input validation
CVE-2022-27664
CWE-20 Medium
No
No
2.2.7, 2.3.1, 2.4.0 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709
CWE-79 Medium
No
No
2.3.1 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU66121 - Improper input validation
CVE-2022-32189
CWE-20 Medium
No
No
2.3.1, 2.4.0 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66068 - Resource exhaustion
CVE-2022-30635
CWE-400 Medium
No
No
2.2.2, 2.3.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66065 - Resource exhaustion
CVE-2022-1962
CWE-400 Medium
No
No
2.2.2, 2.3.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
2.3.1, 2.4.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673
CWE-200 Low
No
No
2.3.1 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702
CWE-79 Low
No
No
2.3.1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64075 - Out-of-bounds write
CVE-2022-1304
CWE-787 Low
No
No
2.3.1 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63279 - Memory corruption
CVE-2022-26700
CWE-119 High
No
No
2.3.1 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 36 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
2.3.1 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU61337 - Heap-based Buffer Overflow
CVE-2022-22629
CWE-122 High
Public exploit available
No
2.3.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 33 more
#VU61336 - Use After Free
CVE-2022-22628
CWE-416 High
No
No
2.3.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more


Showing elements 61 - 80 out of 84