Known vulnerabilities in Red Hat OpenShift Serverless - page 11

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 1.31.1 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 1.31.1 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85582 - Resource exhaustion
CVE-2023-49568		 CWE-400 Medium
No
No
 1.31.1 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 37 more
#VU85467 - Improper input validation
CVE-2024-20932		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 47 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 1.31.1 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 1.31.1 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.31.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 1.31.1 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 1.30.2 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.30.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 654 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 1.30.2 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 1.32.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79113 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3468		 CWE-835 Low
No
No
 1.31.1, 1.32.0 08.08.2023 SB2023080805
SB20231018146
SB2023112310
and 24 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 1.30.2 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 1.30.2 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more


Showing elements 201 - 220 out of 445