Known vulnerabilities in Red Hat OpenShift GitOps - page 5

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465
CWE-94 High
No
No
1.11.6, 1.12.5, 1.13.1 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021
CWE-61 Medium
No
No
1.11.6, 1.12.5, 1.13.1 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020
CWE-62 Medium
No
No
1.11.6, 1.12.5, 1.13.1 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU90715 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29180
CWE-22 Medium
No
No
1.10.5, 1.11.4, 1.12.2 03.06.2024 SB2024060314
SB2024060328
SB2024060410
and 18 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599
CWE-121 High
No
No
1.11.6, 1.12.4, 1.12.5, 1.13.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600
CWE-476 Medium
No
No
1.11.6, 1.12.4, 1.12.5, 1.13.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601
CWE-770 Low
No
No
1.11.6, 1.12.4, 1.12.5, 1.13.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89709 - Memory corruption
CVE-2024-33602
CWE-119 Medium
No
No
1.11.6, 1.12.4, 1.12.5, 1.13.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88533 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32487
CWE-78 Medium
No
No
1.11.6, 1.12.5, 1.13.1 15.04.2024 SB2024041531
SB2024041533
SB2024042949
and 63 more
#VU129003 - Improper Access Control
CVE-2024-31990
CWE-284 Low
No
No
1.12.2 15.04.2024 SB2024041578
SB20240611289
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
1.10.5, 1.11.4, 1.11.6, 1.12.4 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU88098 - Use of Uninitialized Variable
CVE-2024-26147
CWE-457 Low
No
No
1.11.6, 1.12.4 03.04.2024 SB2024040355
SB2024040357
SB2024040358
and 13 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
1.11.6, 1.12.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
1.11.6, 1.12.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.11.6, 1.12.4 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86548 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25620
CWE-22 Medium
No
No
1.11.6, 1.12.4 15.02.2024 SB2024021537
SB2024040354
SB2024040360
and 9 more
#VU71529 - Resource exhaustion
CVE-2022-3094
CWE-400 Medium
No
No
1.12.4 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU67545 - Resource Management Errors
CVE-2022-2795
CWE-399 Medium
No
No
1.12.4 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220
CWE-350 Medium
No
No
1.12.4 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU7120 - Memory corruption
CVE-2017-8461
CWE-119 High
Available
No
1.11.6 15.06.2017 SB2017061408
SB20240718200


Showing elements 81 - 100 out of 241