Known vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - page 2

Vendor: Red Hat Inc.
Software: Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Software CPE: cpe:2.3:a:red_hat:osso:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secondary Scheduler Operator for Red Hat OpenShift (OSSO) Secondary Scheduler Operator for Red Hat OpenShift (OSSO) is affected by 100 known vulnerabilities: 21 high, 66 medium, 13 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 1.1.3, 1.2.0 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 1.1.3, 1.2.0 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 1.1.3, 1.2.0 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 1.2.0 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU77780 - Memory corruption
CVE-2020-24736		 CWE-119 Low
No
No
 1.1.2 29.06.2023 SB2023062903
SB2023062908
SB2023062968
and 45 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 1.1.3, 1.2.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 1.1.2 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 1.1.2 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75741 - Improper input validation
CVE-2023-1667		 CWE-20 Medium
No
No
 1.1.2 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 75 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 1.1.3, 1.2.0 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.1.3, 1.2.0 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.1.3, 1.2.0 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 1.1.2 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537		 CWE-835 Medium
No
No
 1.1.2 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 1.1.2 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 1.1.2 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.1.3, 1.2.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73264 - Incorrect Calculation
CVE-2023-24532		 CWE-682 High
No
No
 1.1.2 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.1.3, 1.2.0 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 1.1.2 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more


Showing elements 21 - 40 out of 100