Known vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - page 3

Vendor: Red Hat Inc.
Software: Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Software CPE: cpe:2.3:a:red_hat:osso:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secondary Scheduler Operator for Red Hat OpenShift (OSSO) Secondary Scheduler Operator for Red Hat OpenShift (OSSO) is affected by 100 known vulnerabilities: 21 high, 66 medium, 13 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 1.1.2 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74146 - Improper Privilege Management
CVE-2023-26604		 CWE-269 Low
No
No
 1.1.2 28.03.2023 SB2023032869
SB2023032871
SB2023040540
and 56 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 1.1.2 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 1.1.1 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 1.1.1 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 1.1.1 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 1.1.1 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 1.1.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 1.1.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 1.1.1 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 1.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 1.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-32190		 CWE-22 Medium
No
No
 1.1.1 21.09.2022 SB2022091520
SB2022092146
SB2022092946
and 33 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 1.1.1 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 1.1.1 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU64075 - Out-of-bounds write
CVE-2022-1304		 CWE-787 Low
No
No
 1.1.1 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63280 - Use After Free
CVE-2022-26709		 CWE-416 High
No
No
 1.1.1 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 36 more
#VU63281 - Use After Free
CVE-2022-26710		 CWE-416 High
No
No
 1.1.1 16.05.2022 SB2022051701
SB2022051705
SB2022051706
and 34 more
#VU61337 - Heap-based Buffer Overflow
CVE-2022-22629		 CWE-122 High
Available
No
 1.1.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 33 more
#VU61333 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22662		 CWE-200 Medium
No
No
 1.1.1 14.03.2022 SB2022031433
SB2022031434
SB2022031435
and 35 more


Showing elements 41 - 60 out of 100