Known vulnerabilities in OpenShift Service Mesh - page 10

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
2.4.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
2.3.2 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897
CWE-185 Medium
No
No
2.3.2 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71364 - Improper Access Control
CVE-2022-3162
CWE-284 Low
No
No
2.4.0 19.01.2023 SB2023011938
SB2023011939
SB2023020908
and 17 more
#VU71362 - Protection Mechanism Failure
CVE-2022-3259
CWE-693 Low
No
No
2.4.0 19.01.2023 SB2023011939
SB2023020908
SB2023032315
and 8 more
#VU71361 - Resource exhaustion
CVE-2021-4235
CWE-400 Medium
No
No
2.4.0 19.01.2023 SB2023011937
SB2023011939
SB2023020869
and 13 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
2.3.2 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU69407 - Resource exhaustion
CVE-2022-3204
CWE-400 Medium
No
No
2.4.0 18.11.2022 SB2022111805
SB2022111806
SB2022111808
and 19 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
2.3.2 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU68829 - Resource Management Errors
CVE-2022-40304
CWE-399 Medium
No
No
2.3.2 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
2.3.2 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680
CWE-416 Medium
No
No
2.3.1, 2.3.2 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU68387 - Resource Management Errors
CVE-2022-2879
CWE-399 Medium
No
No
2.3.1, 2.4.0 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67971 - Use After Free
CVE-2022-42012
CWE-416 Low
No
No
2.3.1, 2.3.2 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67970 - Out-of-bounds read
CVE-2022-42011
CWE-125 Low
No
No
2.3.1, 2.3.2 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67969 - Reachable Assertion
CVE-2022-42010
CWE-617 Low
No
No
2.3.1, 2.3.2 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 58 more
#VU67554 - Server-Side Request Forgery (SSRF)
CVE-2022-3172
CWE-918 Medium
No
No
2.4.0 21.09.2022 SB2022092138
SB2022102614
SB2023011939
and 23 more
#VU66817 - Improper Access Control
CVE-2022-2995
CWE-284 Low
No
No
2.4.0 30.08.2022 SB2022083001
SB2023011939
SB2023020908
and 11 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
2.3.1, 2.4.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66062 - Resource exhaustion
CVE-2022-30631
CWE-400 Medium
No
No
2.3.1, 2.4.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more


Showing elements 181 - 200 out of 273