Known vulnerabilities in Red Hat OpenShift Serverless 1.21.0 - page 2

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Version: 1.21.0
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 127
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless version 1.21.0 Red Hat OpenShift Serverless 1.21.0 is affected by 127 vulnerabilities: 1 critical, 22 high, 71 medium, 33 low Critical High Medium Low

Vulnerabilities (127)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 1.31.1 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 1.31.1 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 1.31.1 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84985 - Out-of-bounds read
CVE-2023-7104		 CWE-125 Medium
No
No
 1.31.1, 1.32.0 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Public exploit available
No
 1.31.1, 1.32.0 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.31.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 1.31.1 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 1.31.1, 1.32.0 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 1.31.1, 1.32.0 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 1.30.2 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 1.30.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 1.30.2 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 1.30.2 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Public exploit available
Exploited
 1.30.2 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 1.30.2 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU79113 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3468		 CWE-835 Low
No
No
 1.31.1, 1.32.0 08.08.2023 SB2023080805
SB20231018146
SB2023112310
and 24 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 1.30.2 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 1.31.1, 1.32.0 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 1.31.1, 1.32.0 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 1.30.2 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more


Showing elements 21 - 40 out of 127