Known vulnerabilities in Red Hat OpenShift Serverless 1.21.0 - page 6

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Version: 1.21.0
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 127
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless version 1.21.0 Red Hat OpenShift Serverless 1.21.0 is affected by 127 vulnerabilities: 1 critical, 22 high, 71 medium, 33 low Critical High Medium Low

Vulnerabilities (127)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 1.26.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 1.26.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68439 - Improper input validation
CVE-2022-21618		 CWE-20 Medium
No
No
 1.26.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 60 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 1.26.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 1.26.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU68376 - Integer overflow
CVE-2022-3515		 CWE-190 High
No
No
 1.26.0 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU67412 - Out-of-bounds read
CVE-2020-35527		 CWE-125 Medium
No
No
 1.26.0 15.09.2022 SB2020080601
SB2022091540
SB2022102543
and 29 more
#VU67411 - NULL Pointer Dereference
CVE-2020-35525		 CWE-476 Medium
No
No
 1.26.0 15.09.2022 SB2020080601
SB2022091540
SB2022092902
and 30 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709		 CWE-79 Medium
No
No
 1.26.0, 1.27.0 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU65915 - Double Free
CVE-2022-2509		 CWE-415 High
No
No
 1.26.0, 1.27.0 02.08.2022 SB2022080207
SB2022080208
SB2022080509
and 54 more
#VU64805 - Improper input validation
CVE-2021-43565		 CWE-20 Medium
No
No
 1.26.0 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU64075 - Out-of-bounds write
CVE-2022-1304		 CWE-787 Low
No
No
 1.26.0, 1.27.0 08.06.2022 SB2022060814
SB2022060815
SB2022060830
and 66 more
#VU63280 - Use After Free
CVE-2022-26709		 CWE-416 High
No
No
 1.26.0, 1.27.0 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 36 more
#VU63281 - Use After Free
CVE-2022-26710		 CWE-416 High
No
No
 1.26.0, 1.27.0 16.05.2022 SB2022051701
SB2022051705
SB2022051706
and 34 more
#VU63279 - Memory corruption
CVE-2022-26700		 CWE-119 High
No
No
 1.26.0, 1.27.0 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 36 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 1.26.0 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 1.22.1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU61336 - Use After Free
CVE-2022-22628		 CWE-416 High
No
No
 1.26.0, 1.27.0 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more
#VU61335 - Use After Free
CVE-2022-22624		 CWE-416 High
No
No
 1.26.0, 1.27.0 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 32 more
#VU61333 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22662		 CWE-200 Medium
No
No
 1.26.0, 1.27.0 14.03.2022 SB2022031433
SB2022031434
SB2022031435
and 35 more


Showing elements 101 - 120 out of 127