Known vulnerabilities in Red Hat OpenShift Serverless - page 18

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 1.24.0 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 1.24.0 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 1.24.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 1.24.0 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 1.24.0 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 1.24.0 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 1.22.1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 1.22.1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 1.22.1 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61754 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22963		 CWE-94 Critical
Available
Exploited
 1.21.1 31.03.2022 SB2022033107
SB2022041275
SB2022060214
and 15 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189		 CWE-918 Medium
No
No
 1.22.1 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 1.24.0 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 111 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921		 CWE-185 Medium
No
No
 1.24.0 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 1.21.0 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU59722 - Improper input validation
CVE-2022-21360		 CWE-20 Medium
No
No
 1.21.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59723 - Improper input validation
CVE-2022-21365		 CWE-20 Medium
No
No
 1.21.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 94 more
#VU59724 - Improper input validation
CVE-2022-21366		 CWE-20 Medium
No
No
 1.21.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 40 more
#VU59726 - Improper input validation
CVE-2022-21296		 CWE-20 Medium
No
No
 1.21.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 65 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 1.22.1 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU56217 - Memory corruption
CVE-2021-3634		 CWE-119 High
No
No
 1.22.1 31.08.2021 SB2021083135
SB2021083136
SB2022011903
and 46 more


Showing elements 341 - 360 out of 445