Known vulnerabilities in Red Hat OpenShift GitOps - page 12

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61587 - Improper Access Control
CVE-2022-1025
CWE-284 High
No
No
1.2.3, 1.3.5, 1.3.6, 1.4.4 24.03.2022 SB2022032406
SB2022032444
SB2022032445
and 2 more
#VU61585 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24731
CWE-22 Low
No
No
1.2.3, 1.3.5, 1.3.6, 1.4.4 24.03.2022 SB2022032407
SB2022032444
SB2022032445
and 2 more
#VU61583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24730
CWE-22 Medium
No
No
1.2.3, 1.3.5, 1.3.6, 1.4.4 24.03.2022 SB2022032407
SB2022032444
SB2022032445
and 2 more
#VU61394 - UNIX Symbolic Link (Symlink) Following
CVE-2021-31566
CWE-61 Low
No
No
1.2.3, 1.3.6, 1.4.4 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 27 more
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177
CWE-61 Low
No
No
1.2.3, 1.3.6, 1.4.4 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 25 more
#VU61293 - Off-by-one Error
CVE-2021-3999
CWE-193 High
No
No
1.2.3, 1.3.6, 1.4.4 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 36 more
#VU60321 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24348
CWE-22 Medium
Available
No
1.3.4, 1.4 06.02.2022 SB2022020601
SB2022020935
#VU59993 - Improper Verification of Cryptographic Signature
CVE-2021-3521
CWE-347 Medium
No
No
1.3.4, 1.4 25.01.2022 SB2022012518
SB2022012519
SB2022020935
and 23 more
#VU59643 - Integer overflow
CVE-2021-46143
CWE-190 High
No
No
1.2.3, 1.3.6, 1.4.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 58 more
#VU59642 - Resource exhaustion
CVE-2021-45960
CWE-400 Medium
No
No
1.2.3, 1.3.6, 1.4.4 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU52736 - Reachable Assertion
CVE-2021-25215
CWE-617 Medium
No
No
- 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 42 more
#VU52195 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-20305
CWE-327 High
No
No
- 06.04.2021 SB2021041367
SB2021041616
SB2021041803
and 36 more
#VU50047 - Incorrect Calculation
CVE-2021-3114
CWE-682 Medium
No
No
- 26.01.2021 SB2021012714
SB2021012715
SB20210120130
and 40 more
#VU48516 - Reachable Assertion
CVE-2020-25709
CWE-617 Medium
No
No
1.2.3, 1.3.6 18.11.2020 SB2020111801
SB2020111802
SB2020103044
and 16 more
#VU48515 - Reachable Assertion
CVE-2020-25710
CWE-617 Medium
No
No
1.2.3, 1.3.6 17.11.2020 SB2020111801
SB2020111802
SB2020103045
and 15 more
#VU48480 - Improper input validation
CVE-2020-28362
CWE-20 Medium
No
No
- 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692
CWE-476 Medium
No
No
- 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more
#VU47910 - Allocation of Resources Without Limits or Throttling
CVE-2020-25648
CWE-770 Medium
No
No
- 21.10.2020 SB2020102132
SB2020102609
SB2021050605
and 18 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845
CWE-835 Medium
No
No
- 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586
CWE-362 Medium
No
No
- 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more


Showing elements 221 - 240 out of 241