Known vulnerabilities in OpenShift Service Mesh - page 13

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65353 - Improper Authentication
CVE-2022-31107
CWE-287 High
No
No
2.2.2 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
2.2.2 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
2.2.2 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64508 - Out-of-bounds read
CVE-2022-1927
CWE-125 Low
No
No
2.2.2 20.06.2022 SB2022062022
SB2022080332
SB2022080610
and 49 more
#VU64506 - Out-of-bounds write
CVE-2022-1897
CWE-787 Low
No
No
2.2.2 20.06.2022 SB2022062022
SB2022070807
SB2022080332
and 48 more
#VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43813
CWE-22 Low
No
No
2.1.3 14.06.2022 SB2022061422
SB2022062026
SB2022081215
and 16 more
#VU64158 - Memory corruption
CVE-2022-29228
CWE-119 Medium
No
No
2.1.3 10.06.2022 SB2022061010
SB2022061422
SB2022070541
#VU64157 - Incorrect Implementation of Authentication Algorithm
CVE-2022-29226
CWE-303 High
No
No
2.1.3 10.06.2022 SB2022061010
SB2022061422
SB2022070541
#VU64155 - NULL Pointer Dereference
CVE-2022-29224
CWE-476 Medium
No
No
2.0.10, 2.1.3 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more
#VU64154 - Resource exhaustion
CVE-2022-29225
CWE-400 Medium
No
No
2.0.10, 2.1.3 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more
#VU64153 - Out-of-bounds read
CVE-2022-31045
CWE-125 Medium
No
No
2.1.3 10.06.2022 SB2022061011
SB2022061422
SB2022070541
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
2.2.2 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU63487 - Out-of-bounds write
CVE-2022-1785
CWE-787 High
No
No
2.2.2 20.05.2022 SB2022052017
SB2022062022
SB2022063027
and 47 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
2.2.2 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62038 - Resource exhaustion
CVE-2022-23772
CWE-400 Medium
No
No
2.1.3 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773
CWE-863 Low
Available
No
2.1.3 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806
CWE-252 Medium
No
No
2.1.3 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU62002 - Improper input validation
CVE-2022-1271
CWE-20 High
No
No
2.1.3, 2.4.8, 2.5.2 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61763 - Use After Free
CVE-2022-1154
CWE-416 High
No
No
2.1.3 31.03.2022 SB2022033113
SB2022033115
SB2022041528
and 33 more
#VU55853 - Integer overflow
CVE-2021-38185
CWE-190 High
Available
No
2.1.3 16.08.2021 SB2021081602
SB2021090901
SB2022051160
and 21 more


Showing elements 241 - 260 out of 273