Known vulnerabilities in OpenShift Service Mesh - page 8
Vendor:
Red Hat Inc.
Software:
OpenShift Service Mesh
Software CPE:
cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
273
Public exploits:
17
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.6.12
2.6.11
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.4
2.6.1
2.6.0
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
2.5.10
2.6.5
2.5.8
2.4.14
2.5.7
2.4.13
2.5.6
2.6.3
2.6.2
2.5.5
2.4.11
2.4.8
2.5.2
2.5.1
2.5.0
2.4.5
2.2.12
2.2.11
2.3.8
2.3.7
2.4.4
2.4.3
2.2.10
2.2.9
2.3.6
2.4.2
2.4.1
2.3.5
2.3.4
2.3.3
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.4.0
2.3.2
2.1.6
2.3.1
2.3.0
1.0
2.1.5.1
2.2.2
2.1.5
2.0.11
2.2.1
2.2.0
2.1.4
2.1.3
2.0.10
2.1.2.1
2.1.2
2.0.9
2.1.1
2.1.0
2.0.8
2.0.7.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
Vulnerabilities (273)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78682 - Use After Free CVE-2023-35942 |
CWE-416 | Medium | 2.3.6, 2.4.3 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081405 and 3 more |
||
| #VU78681 - Use After Free CVE-2023-35943 |
CWE-416 | Medium | 2.3.6, 2.4.2 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 3 more |
||
| #VU78679 - Improper input validation CVE-2023-35944 |
CWE-20 | High | 2.2.10, 2.3.6, 2.4.2 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78678 - Improper Encoding or Escaping of Output CVE-2023-35941 |
CWE-116 | High | 2.2.10, 2.3.6, 2.4.2 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78293 - Missing release of memory after effective lifetime CVE-2023-35945 |
CWE-401 | Medium | 2.2.10, 2.3.6 | 16.07.2023 |
SB2023071620 SB2023080913 SB2023081405 and 18 more |
||
| #VU78005 - Inadequate Encryption Strength CVE-2023-3089 |
CWE-326 | Medium | 2.2.8, 2.3.5, 2.4.1 | 06.07.2023 |
SB2023070602 SB2023070603 SB2023070604 and 34 more |
||
| #VU77780 - Memory corruption CVE-2020-24736 |
CWE-119 | Low | 2.2.8, 2.2.10, 2.3.5, 2.4.1 | 29.06.2023 |
SB2023062903 SB2023062908 SB2023062968 and 45 more |
||
| #VU77612 - Resource exhaustion CVE-2023-2828 |
CWE-400 | Medium | 2.3.6, 2.4.2 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062601 and 66 more |
||
| #VU75741 - Improper input validation CVE-2023-1667 |
CWE-20 | Medium | 2.2.8, 2.2.10, 2.3.5, 2.4.1 | 04.05.2023 |
SB2023050456 SB2023050501 SB2023052441 and 75 more |
||
| #VU75740 - Improper Authentication CVE-2023-2283 |
CWE-287 | High | 2.2.8, 2.2.10, 2.3.5, 2.4.1 | 04.05.2023 |
SB2023050456 SB2023050501 SB2023052441 and 84 more |
||
| #VU74475 - Improper input validation CVE-2023-27493 |
CWE-20 | High | 2.2.9 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74473 - Improper input validation CVE-2023-27496 |
CWE-20 | Medium | 2.2.9 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74146 - Improper Privilege Management CVE-2023-26604 |
CWE-269 | Low | 2.2.8, 2.3.5, 2.4.1, 2.5.1 | 28.03.2023 |
SB2023032869 SB2023032871 SB2023040540 and 56 more |
||
| #VU73828 - State Issues CVE-2023-27535 |
CWE-371 | Low | 2.2.7, 2.4.0 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 84 more |
||
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 2.2.8, 2.3.5 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU72618 - Improper input validation CVE-2023-24329 |
CWE-20 | Medium | 2.2.8, 2.3.5, 2.4.1 | 28.02.2023 |
SB2023022819 SB2023022822 SB2023030832 and 158 more |
||
| #VU72125 - Inadequate Encryption Strength CVE-2023-0361 |
CWE-326 | Medium | 2.2.7, 2.2.8, 2.3.5, 2.4.1 | 11.02.2023 |
SB2023021103 SB2023021109 SB2023021561 and 88 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 2.2.7, 2.2.8, 2.3.5, 2.4.1 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 2.2.7 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU69582 - NULL Pointer Dereference CVE-2022-36227 |
CWE-476 | Low | 2.2.7, 2.4.0, 2.4.8, 2.5.2 | 24.11.2022 |
SB2022112432 SB2022112437 SB2022112438 and 77 more |
Showing elements 141 - 160 out of 273