Known vulnerabilities in prometheus-jmx-exporter (Red Hat package)

Vendor: Red Hat Inc.
Software: prometheus-jmx-exporter (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:prometheus-jmx-exporter_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting prometheus-jmx-exporter (Red Hat package) prometheus-jmx-exporter (Red Hat package) is affected by 3 known vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 0.12.0-9.el8_7 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 0.12.0-8.el8_6 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU52578 - Improper input validation
CVE-2017-18640		 CWE-20 Medium
No
No
 0.12.0-6.el8 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more