Known vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - page 4

Vendor: Red Hat Inc.
Software: Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Software CPE: cpe:2.3:a:red_hat:osso:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secondary Scheduler Operator for Red Hat OpenShift (OSSO) Secondary Scheduler Operator for Red Hat OpenShift (OSSO) is affected by 100 known vulnerabilities: 21 high, 66 medium, 13 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 1.1.1 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 1.1.1 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 1.1.1 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 1.1.1 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU70461 - Improper Privilege Management
CVE-2022-4415		 CWE-269 Low
No
No
 1.1.1 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 1.1.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 1.1.1 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 1.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 1.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-32190		 CWE-22 Medium
No
No
 1.1.1 21.09.2022 SB2022091520
SB2022092146
SB2022092946
and 33 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 1.1.1 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 1.1.1 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 1.1.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 1.1.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64075 - Out-of-bounds write
CVE-2022-1304		 CWE-787 Low
No
No
 1.1.1 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 1.1.1 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 72 more
#VU61337 - Heap-based Buffer Overflow
CVE-2022-22629		 CWE-122 High
Available
No
 1.1.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 33 more
#VU61336 - Use After Free
CVE-2022-22628		 CWE-416 High
No
No
 1.1.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more
#VU61335 - Use After Free
CVE-2022-22624		 CWE-416 High
No
No
 1.1.1 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more
#VU61333 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22662		 CWE-200 Medium
No
No
 1.1.1 14.03.2022 SB2022031433
SB2022031434
SB2022031435
and 35 more


Showing elements 61 - 80 out of 100