Known vulnerabilities in Red Hat Openshift Application Runtimes

Vendor: Red Hat Inc.
Software: Red Hat Openshift Application Runtimes
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_application_runtimes:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Openshift Application Runtimes Red Hat Openshift Application Runtimes is affected by 15 known vulnerabilities: 3 high, 8 medium, 4 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75561 - Improper input validation
CVE-2023-20860		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108		 CWE-835 Medium
No
No
 - 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68520 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31684		 CWE-200 Medium
No
No
 - 20.10.2022 SB2022102009
SB2023030653
SB2023082307
and 2 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 - 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 - 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more
#VU22827 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2019-10174		 CWE-470 Low
No
No
 - 19.11.2019 SB2019111902
SB2019111903
SB2020021334
and 4 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 - 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU21580 - Improper input validation
CVE-2019-16942		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU19933 - Permissions, Privileges, and Access Controls
CVE-2019-14379		 CWE-264 High
No
No
 - 05.08.2019 SB2019091307
SB2019092703
SB2019100116
and 33 more
#VU19018 - Deserialization of Untrusted Data
CVE-2019-12384		 CWE-502 High
No
No
 - 04.07.2019 SB2019091218
SB2019092703
SB2019100116
and 28 more
#VU14498 - Out-of-bounds write
CVE-2018-12115		 CWE-787 Low
No
No
 - 22.08.2018 SB2018082209
SB2018082313
SB2018082315
and 7 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 - 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more