Known vulnerabilities in OpenShift Service Mesh - page 7

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81453 - Use After Free
CVE-2023-4813
CWE-416 Medium
No
No
2.2.11, 2.3.8, 2.4.4 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806
CWE-416 Medium
No
No
2.2.11, 2.3.8, 2.4.4 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911
CWE-119 Low
Available
Exploited
2.2.11, 2.3.8, 2.4.4 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527
CWE-125 Medium
No
No
2.2.11, 2.3.8, 2.4.4 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80931 - Resource exhaustion
CVE-2023-3341
CWE-400 Medium
No
No
2.2.11, 2.3.8, 2.4.4 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU79878 - Incorrect Authorization
CVE-2023-3899
CWE-863 Low
No
No
2.4.3 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969
CWE-264 Low
No
No
2.2.10, 2.2.11, 2.3.8, 2.4.3, 2.4.4 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681
CWE-200 Medium
Available
No
2.4.3 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602
CWE-401 Medium
No
No
2.2.10, 2.4.3, 2.4.8, 2.5.2 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
2.2.10, 2.4.3 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75432 - Permissions, Privileges, and Access Controls
CVE-2023-30630
CWE-264 Low
No
No
2.2.11, 2.3.8, 2.4.4 24.04.2023 SB2023042410
SB2023042412
SB2023042642
and 51 more
#VU75141 - Memory corruption
CVE-2023-29491
CWE-119 Low
No
No
2.2.11, 2.3.8, 2.4.4, 2.4.8, 2.5.2 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484
CWE-476 Medium
No
No
2.2.10, 2.4.3 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
2.2.10, 2.4.3 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU74480 - Improper input validation
CVE-2023-27487
CWE-20 High
No
No
2.2.9 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74477 - Improper input validation
CVE-2023-27491
CWE-20 Medium
No
No
2.2.9 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74476 - Allocation of Resources Without Limits or Throttling
CVE-2023-27492
CWE-770 Medium
No
No
2.2.9 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74474 - Improper input validation
CVE-2023-27488
CWE-20 Medium
No
No
2.2.9 05.04.2023 SB2023040516
SB2023040519
SB2023070307
and 2 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
2.2.10, 2.4.3 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
2.2.10, 2.4.3, 2.4.8, 2.5.2 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more


Showing elements 121 - 140 out of 273