Known vulnerabilities in OpenShift Service Mesh - page 12

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71694 - Improper input validation
CVE-2022-3962
CWE-20 Low
No
No
2.3.1 31.01.2023 SB2023013110
SB2023013111
#VU68376 - Integer overflow
CVE-2022-3515
CWE-190 High
No
No
2.3.1 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU66868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23648
CWE-79 Medium
No
No
2.3.1 30.08.2022 SB2022083037
SB2022083038
SB2022110844
and 6 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
2.1.5 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66065 - Resource exhaustion
CVE-2022-1962
CWE-400 Medium
No
No
2.2.2, 2.3.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
2.3.1, 2.4.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
2.0.11, 2.1.5 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673
CWE-200 Low
No
No
2.3.1 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703
CWE-352 Medium
No
No
2.3.1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702
CWE-79 Low
No
No
2.3.1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713
CWE-639 Low
No
No
2.3.1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU64269 - Integer overflow
CVE-2022-28327
CWE-190 Low
No
No
2.1.3, 2.1.5 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675
CWE-120 Low
No
No
2.1.3, 2.1.5 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU64075 - Out-of-bounds write
CVE-2022-1304
CWE-787 Low
No
No
2.3.1 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63173 - Permissions, Privileges, and Access Controls
CVE-2022-29526
CWE-264 Low
No
No
2.1.5 14.05.2022 SB2022051403
SB2022051404
SB2022062928
and 65 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
2.0.11, 2.1.3, 2.1.5 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
2.3.1 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU61336 - Use After Free
CVE-2022-22628
CWE-416 High
No
No
2.3.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more
#VU61335 - Use After Free
CVE-2022-22624
CWE-416 High
No
No
2.3.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921
CWE-185 Medium
No
No
2.1.5 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more


Showing elements 221 - 240 out of 273