Known vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO)

Vendor: Red Hat Inc.
Software: Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Software CPE: cpe:2.3:a:red_hat:osso:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secondary Scheduler Operator for Red Hat OpenShift (OSSO) Secondary Scheduler Operator for Red Hat OpenShift (OSSO) is affected by 100 known vulnerabilities: 21 high, 66 medium, 13 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 1.2.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 1.2.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 1.2.2 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 1.3.0 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 1.3.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.3.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 1.2.1 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.2.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 1.1.3, 1.2.0 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 1.1.3, 1.2.0 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 1.1.3, 1.2.0 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 1.1.3 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 1.1.3, 1.2.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 1.1.3, 1.2.0 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.1.3, 1.2.0 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.1.3, 1.2.0 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.1.3, 1.2.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more


Showing elements 1 - 20 out of 100