Known vulnerabilities in Red Hat OpenShift GitOps - page 2

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105723 - Stack-based buffer overflow
CVE-2024-8176
CWE-121 High
No
No
1.15.3, 1.16.1 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
1.15.3, 1.16.1 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
1.15.3, 1.16.1 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
1.15.3, 1.16.1 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
1.15.3, 1.16.1 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU102871 - Improper Encoding or Escaping of Output
CVE-2024-52005
CWE-116 Medium
No
No
1.15.3, 1.16.1 16.01.2025 SB2025011641
SB2025021457
SB2025051343
and 18 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
1.13.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800
CWE-79 Medium
No
No
1.12.6, 1.13.2 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355
CWE-457 Medium
No
No
1.15.3 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799
CWE-79 Low
No
No
1.12.6, 1.13.2 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796
CWE-79 Medium
No
No
1.12.6, 1.13.2 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
1.12.6, 1.13.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU94711 - Resource exhaustion
CVE-2024-1975
CWE-400 Medium
No
No
1.12.6, 1.13.2 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737
CWE-399 Medium
No
No
1.12.6, 1.13.2 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104
CWE-532 Low
No
No
1.12.6 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
1.15.3 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
1.15.3 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
1.15.3 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849
CWE-200 Low
No
No
1.12.6 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920
CWE-345 Medium
No
No
1.12.6, 1.13.2 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more


Showing elements 21 - 40 out of 241