Known vulnerabilities in Red Hat OpenShift GitOps - page 9

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Available
No
1.11 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU82923 - Allocation of Resources Without Limits or Throttling
CVE-2023-3153
CWE-770 Medium
No
No
1.9.3 08.11.2023 SB2023110861
SB2023110864
SB2023110866
and 2 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
1.9.3, 1.10.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.9.3, 1.10.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU80557 - Exposure of sensitive information to an unauthorized actor
CVE-2023-40029
CWE-200 Medium
No
No
1.9 08.09.2023 SB2023090822
SB2023090846
SB2023091175
#VU80556 - Improper input validation
CVE-2023-40584
CWE-20 Medium
No
No
1.9 08.09.2023 SB2023090822
SB2023090846
SB2023091175
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602
CWE-401 Medium
No
No
- 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
1.9.3 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75606 - Improper Certificate Validation
CVE-2023-31486
CWE-295 Medium
No
No
1.9.3 01.05.2023 SB2023050118
SB2023070339
SB2023101769
and 46 more
#VU73992 - Information Exposure Through an Error Message
CVE-2022-41354
CWE-209 Low
No
No
- 23.03.2023 SB2023032365
SB2023032406
SB2023032407
and 1 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
- 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339
CWE-78 High
No
No
1.9.3 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337
CWE-78 High
No
No
1.9.3 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
1.10.0, 1.11 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
- 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
1.10.0, 1.11 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU68718 - Use After Free
CVE-2022-43680
CWE-416 Medium
No
No
1.5.9, 1.6.4, 1.7, 1.10.0, 1.11 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861
CWE-601 Low
No
No
- 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
- 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU64604 - Observable discrepancy
CVE-2022-34174
CWE-203 Medium
No
No
- 23.06.2022 SB2022062312
SB2023011328
SB2023021602
and 5 more


Showing elements 161 - 180 out of 241