Known vulnerabilities in Red Hat OpenShift GitOps - page 4
Vendor:
Red Hat Inc.
Software:
Red Hat OpenShift GitOps
Software CPE:
cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
241
Public exploits:
21
Known exploited (KEV):
3
Breakdown by Severity Chart
1.20.7
1.21.4
1.20.6
1.19.6
1.19.5
1.21.1
1.20.5
1.20.4
1.19.4
1.18.6
1.20.2
1.19.3
1.18.5
1.19.2
1.18.4
1.17.5
1.19.1
1.17.4
1.18.3
1.17.2
1.17.1
1.17.0
1.18.1
1.18.0
1.16.4
1.16.3
1.16.2
1.16.0
1.17.3
1.18.2
1.16.5
1.16.1
1.15.3
1.14.4
1.15.2
1.12.6
1.13.2
1.12.5
1.11.7
1.13.1
1.11.6
1.12.4
1.10.5
1.12.2
1.11.4
1.10.6
1.12.3
1.11.5
1.12.1
1.10.4
1.10.3
1.10.2
1.11.3
1.11.2
1.11.1
1.12.0
1.11
1.9.3
1.9.2
1.9.1
1.10.1
1.10.0
1.9
1.8
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.7
1.5.9
1.5.8
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5
1.4.4
1.4.3
1.4.2
1.4.1
1.2.3
1.2.2
1.2.1
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.4
1.3
1.2
1.1
1.0
Vulnerabilities (241)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89491 - Unrestricted Upload of File with Dangerous Type CVE-2024-32002 |
CWE-434 | High | 1.11.6, 1.12.5, 1.13.1 | 15.05.2024 |
SB2024051504 SB2024060720 SB2024060721 and 52 more |
||
| #VU89490 - Improper Control of Generation of Code ('Code Injection') CVE-2024-32004 |
CWE-94 | High | 1.11.6, 1.12.5, 1.13.1 | 15.05.2024 |
SB2024051503 SB2024060720 SB2024060721 and 51 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 1.12.5, 1.13.1 | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 112 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 1.11.6, 1.12.5, 1.13.1 | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU87685 - Resource exhaustion CVE-2024-0450 |
CWE-400 | Medium | 1.12.4, 1.12.5, 1.13.1 | 21.03.2024 |
SB2024032107 SB2024032110 SB2024040848 and 80 more |
||
| #VU87185 - UNIX Symbolic Link (Symlink) Following CVE-2023-6597 |
CWE-61 | Low | 1.12.4, 1.12.5, 1.13.1 | 07.03.2024 |
SB2024030718 SB2024030726 SB2024030727 and 88 more |
||
| #VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-48624 |
CWE-78 | Medium | 1.10.4, 1.11.3, 1.11.6, 1.12.1, 1.12.5, 1.13.1 | 28.02.2024 |
SB2024022820 SB2024022839 SB2024030503 and 60 more |
||
| #VU86707 - Server-Side Request Forgery (SSRF) CVE-2024-24806 |
CWE-918 | Medium | 1.12.5, 1.13.1 | 22.02.2024 |
SB2024022210 SB2024022214 SB2024022225 and 54 more |
||
| #VU86052 - Use After Free CVE-2024-25062 |
CWE-416 | High | 1.11.6, 1.12.4, 1.12.5, 1.13.1 | 05.02.2024 |
SB2024020507 SB2024020508 SB2024020742 and 115 more |
||
| #VU84985 - Out-of-bounds read CVE-2023-7104 |
CWE-125 | Medium | 1.10.0, 1.10.4, 1.11, 1.11.3, 1.12.0, 1.12.5, 1.13.1 | 04.01.2024 |
SB2024010417 SB2024010420 SB2024010516 and 108 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 1.12.5, 1.13.1 | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU79561 - Out-of-bounds write CVE-2023-4016 |
CWE-787 | High | 1.12.5, 1.13.1 | 15.08.2023 |
SB2023081548 SB20230821203 SB2023082925 and 49 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 1.12.5, 1.13.1 | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 1.12.5, 1.13.1 | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU77252 - NULL Pointer Dereference CVE-2023-2953 |
CWE-476 | Medium | 1.11.6, 1.12.5, 1.13.1 | 13.06.2023 |
SB2023061366 SB2023061417 SB2023061418 and 59 more |
||
| #VU77164 - Exposure of sensitive information to an unauthorized actor CVE-2023-32681 |
CWE-200 | Medium | 1.10.0, 1.11, 1.12.5, 1.13.1 | 12.06.2023 |
SB2023061224 SB2023061306 SB2023061514 and 114 more |
||
| #VU70474 - Integer overflow CVE-2022-47629 |
CWE-190 | High | 1.12.5, 1.13.1 | 22.12.2022 |
SB2022122202 SB2022122204 SB2022122205 and 98 more |
||
| #VU69582 - NULL Pointer Dereference CVE-2022-36227 |
CWE-476 | Low | 1.12.5, 1.13.1 | 24.11.2022 |
SB2022112432 SB2022112437 SB2022112438 and 77 more |
||
| #VU68858 - Off-by-one Error CVE-2021-46848 |
CWE-193 | Medium | 1.5.9, 1.6.4, 1.7, 1.10.0, 1.11, 1.12.5, 1.13.1 | 31.10.2022 |
SB2022103141 SB2022103142 SB2022103143 and 84 more |
||
| #VU48418 - Out-of-bounds read CVE-2020-28241 |
CWE-125 | Medium | 1.10.0, 1.11, 1.12.5, 1.13.1 | 06.11.2020 |
SB2020110615 SB2020111401 SB2020111404 and 32 more |
Showing elements 61 - 80 out of 241