Known vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes - page 3

Software CPE: cpe:2.3:a:red_hat:red_hat_advanced_cluster_security_for_kubernetes:*:*:*:*:*:*:*:*
Total vulnerabilities: 284
Public exploits: 21
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Advanced Cluster Security for Kubernetes Red Hat Advanced Cluster Security for Kubernetes is affected by 284 known vulnerabilities: 3 critical, 52 high, 159 medium, 70 low Critical High Medium Low

Vulnerabilities (284)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104117 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-1244
CWE-78 High
No
No
4.5.7, 4.6.0, 4.6.3 21.02.2025 SB2025022110
SB2025022111
SB2025022112
and 31 more
#VU103422 - Resource exhaustion
CVE-2025-21614
CWE-400 Low
No
No
4.4.8, 4.5.6, 4.6.2 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 20 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613
CWE-88 Low
No
No
4.4.8, 4.5.6, 4.6.2 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
4.4.8, 4.6.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
4.4.8, 4.5.6, 4.6.2 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Available
No
4.4.8, 4.5.6 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU100997 - Insecure Storage of Sensitive Information
CVE-2024-10041
CWE-922 Low
No
No
4.4.8, 4.6.0 27.11.2024 SB2024112540
SB2024112747
SB2024112748
and 38 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538
CWE-185 Medium
No
No
4.4.7, 4.5.5 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100912 - Improper Authentication
CVE-2024-10963
CWE-287 Medium
No
No
4.4.8, 4.6.0 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU100516 - Improper input validation
CVE-2024-11168
CWE-20 Medium
No
No
4.4.8 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99614 - Improper input validation
CVE-2024-50602
CWE-20 Medium
No
No
4.4.7, 4.5.5 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287
CWE-78 Low
No
No
4.4.8 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU97216 - Resource exhaustion
CVE-2024-34156
CWE-400 Medium
No
No
4.4.6, 4.5.5 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
4.6.0 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
4.4.6, 4.5.5, 4.6.0 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU91159 - Improper input validation
CVE-2024-24789
CWE-20 Low
No
No
4.4.6, 4.5.5, 4.6.0 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU90156 - Security Features
CVE-2024-35195
CWE-254 Low
No
No
4.4.8, 4.6.2 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831
CWE-79 Medium
No
No
4.4.8, 4.5.6 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
4.4.8, 4.5.7, 4.6.0, 4.6.3 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU19178 - Out-of-bounds write
CVE-2019-12900
CWE-787 High
No
No
4.4.6, 4.4.8, 4.5.5, 4.6.2 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 41 - 60 out of 284