Known vulnerabilities in Red Hat OpenShift GitOps - page 9

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
1.9.3 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484
CWE-476 Medium
No
No
1.10.0, 1.11 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
1.10.0, 1.11 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73992 - Information Exposure Through an Error Message
CVE-2022-41354
CWE-209 Low
No
No
- 23.03.2023 SB2023032365
SB2023032406
SB2023032407
and 1 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
1.10.0, 1.11 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
- 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72475 - Permissions, Privileges, and Access Controls
CVE-2023-23947
CWE-264 Medium
No
No
- 21.02.2023 SB2023022184
SB2023022185
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303
CWE-122 High
No
No
- 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
- 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72314 - Resource exhaustion
CVE-2022-3064
CWE-400 Medium
No
No
- 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU71686 - Insufficient Entropy
CVE-2021-4238
CWE-331 Low
No
No
- 31.01.2023 SB2023013107
SB2023013111
SB2023013113
and 22 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897
CWE-185 Medium
No
No
- 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71239 - Integer overflow
CVE-2022-23521
CWE-190 High
No
No
- 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 52 more
#VU70461 - Improper Privilege Management
CVE-2022-4415
CWE-269 Low
No
No
1.10.4, 1.11.3, 1.12.0 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
- 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
1.10.0, 1.11 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU67760 - Type conversion
CVE-2020-10735
CWE-704 Medium
No
No
1.10.0, 1.11 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861
CWE-601 Low
No
No
- 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
- 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU64604 - Observable discrepancy
CVE-2022-34174
CWE-203 Medium
No
No
- 23.06.2022 SB2022062312
SB2023011328
SB2023021602
and 5 more


Showing elements 161 - 180 out of 241