Known vulnerabilities in Red Hat OpenShift GitOps - page 2

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
1.16.1 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
1.15.3, 1.16.1 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU103687 - Memory corruption
CVE-2025-0395
CWE-119 Medium
No
No
1.16.1 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
1.15.3, 1.16.1 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800
CWE-79 Medium
No
No
1.12.6, 1.13.2 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355
CWE-457 Medium
No
No
1.15.3 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799
CWE-79 Low
No
No
1.12.6, 1.13.2 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796
CWE-79 Medium
No
No
1.12.6, 1.13.2 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
1.12.6, 1.13.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU94711 - Resource exhaustion
CVE-2024-1975
CWE-400 Medium
No
No
1.12.6, 1.13.2 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737
CWE-399 Medium
No
No
1.12.6, 1.13.2 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104
CWE-532 Low
No
No
1.12.6 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
1.15.3 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
1.15.3 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
1.15.3 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849
CWE-200 Low
No
No
1.12.6 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
1.11.6, 1.12.4, 1.12.6 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
1.15.3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 53 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
1.15.3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 54 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920
CWE-345 Medium
No
No
1.12.6, 1.13.2 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more


Showing elements 21 - 40 out of 241