Known vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO)

Vendor: Red Hat Inc.
Software: Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Software CPE: cpe:2.3:a:red_hat:osso:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secondary Scheduler Operator for Red Hat OpenShift (OSSO) Secondary Scheduler Operator for Red Hat OpenShift (OSSO) is affected by 100 known vulnerabilities: 21 high, 66 medium, 13 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 1.2.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 1.2.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 1.2.2 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 1.3.0 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 187 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 1.3.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 1.2.1 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.2.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 1.1.3, 1.2.0 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.1.3, 1.2.0 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 649 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 1.1.3, 1.2.0 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU80575 - Improper input validation
CVE-2023-39322		 CWE-20 Medium
No
No
 1.2.0 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321		 CWE-20 Medium
No
No
 1.2.0 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 1.2.0 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 1.1.3 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 1.1.3 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 1.1.3, 1.2.0 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more


Showing elements 1 - 20 out of 100