Known vulnerabilities in OpenShift Service Mesh - page 3

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97626 - Improper Output Neutralization for Logs
CVE-2024-45808
CWE-117 Medium
No
No
2.6.2 20.09.2024 SB2024092014
SB2024092023
SB2024100826
#VU97625 - Improper input validation
CVE-2024-45806
CWE-20 Medium
No
No
2.5.5, 2.6.2 20.09.2024 SB2024092014
SB2024092023
SB2024100825
and 1 more
#VU97623 - Resource Management Errors
CVE-2024-45810
CWE-399 Medium
No
No
2.6.2 20.09.2024 SB2024092014
SB2024092023
SB2024100826
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
2.5.5, 2.6.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345
CWE-94 High
No
No
2.4.11, 2.5.5, 2.6.2 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
2.6.2 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331
CWE-676 High
No
No
2.5.5, 2.6.2 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU91157 - Use of Weak Credentials
CVE-2024-23326
CWE-1391 Medium
No
No
2.5.5 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 1 more
#VU91152 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-32976
CWE-835 Medium
No
No
2.4.11, 2.5.5 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 2 more
#VU88855 - Incorrect Check of Function Return Value
CVE-2024-32475
CWE-253 Medium
No
No
2.4.11, 2.5.5 19.04.2024 SB2024041931
SB2024052109
SB2024070220
and 2 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
2.4.8 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU88181 - Resource exhaustion
CVE-2024-30255
CWE-400 Medium
No
No
2.5.5 05.04.2024 SB2024040530
SB2024100412
SB2024100825
and 2 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
2.4.11, 2.5.5, 2.6.2 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87808 - Insufficient Verification of Data Authenticity
CVE-2024-30203
CWE-345 High
No
No
2.5.5, 2.6.2 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 30 more
#VU87804 - Insufficient Verification of Data Authenticity
CVE-2024-30205
CWE-345 High
No
No
2.5.5, 2.6.2 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 32 more
#VU68858 - Off-by-one Error
CVE-2021-46848
CWE-193 Medium
No
No
2.3.1, 2.3.2, 2.4.8, 2.5.2 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU67545 - Resource Management Errors
CVE-2022-2795
CWE-399 Medium
No
No
2.4.0, 2.4.8, 2.5.2 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU63553 - Integer overflow
CVE-2021-43618
CWE-190 Medium
No
No
2.4.8, 2.5.1, 2.5.2 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more
#VU62002 - Improper input validation
CVE-2022-1271
CWE-20 High
No
No
2.1.3, 2.4.8, 2.5.2 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220
CWE-350 Medium
No
No
2.4.8, 2.5.2 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more


Showing elements 41 - 60 out of 273