Known vulnerabilities in Red Hat OpenShift Serverless - page 21

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52195 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-20305		 CWE-327 High
No
No
 1.10.2, 1.14.0 06.04.2021 SB2021041367
SB2021041616
SB2021041803
and 36 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Available
No
 1.10.2, 1.14.0 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 1.10.2, 1.14.0 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU50809 - Improper Authentication
CVE-2020-26160		 CWE-287 Medium
No
No
 1.13.0 18.02.2021 SB20200930109
SB2021021819
SB2022020604
and 4 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 1.12.0 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU46295 - NULL Pointer Dereference
CVE-2020-24659		 CWE-476 Medium
No
No
 1.12.0 04.09.2020 SB2020090415
SB2020090416
SB2020090604
and 11 more
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 1.12.0 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU34080 - NULL Pointer Dereference
CVE-2020-13632		 CWE-476 Low
No
No
 1.10.2, 1.11.0, 1.12.0 06.08.2020 SB2020080601
SB2020080704
SB2020072756
and 21 more
#VU34079 - Permissions, Privileges, and Access Controls
CVE-2020-13631		 CWE-264 Low
No
No
 1.10.2, 1.11.0, 1.12.0 06.08.2020 SB2020080601
SB2020080704
SB2020072756
and 22 more
#VU34077 - Use After Free
CVE-2020-13630		 CWE-416 High
No
No
 1.10.2, 1.11.0, 1.12.0 06.08.2020 SB2020080601
SB2020080704
SB2020072756
and 21 more
#VU29116 - Out-of-bounds read
CVE-2019-20454		 CWE-125 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 17.06.2020 SB2020021421
SB2020061707
SB2020110528
and 14 more
#VU27033 - Out-of-bounds write
CVE-2020-1751		 CWE-787 High
No
No
 1.11.0, 1.12.0 20.04.2020 SB2020040708
SB2020061304
SB2020110915
and 14 more
#VU26756 - Resource Management Errors
CVE-2020-1730		 CWE-399 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 10.04.2020 SB2020041003
SB2020041004
SB2020041005
and 25 more
#VU26628 - Use After Free
CVE-2020-1752		 CWE-416 High
No
No
 1.11.0, 1.12.0 07.04.2020 SB2020040708
SB2020040709
SB2020110915
and 18 more
#VU26388 - Stack-based buffer overflow
CVE-2020-10029		 CWE-121 High
No
No
 1.11.0, 1.12.0 25.03.2020 SB2020030423
SB2020032513
SB2020061304
and 26 more
#VU25861 - NULL Pointer Dereference
CVE-2020-9327		 CWE-476 Low
No
No
 1.10.2, 1.11.0, 1.12.0 10.03.2020 SB2020022121
SB2020031502
SB2020110913
and 15 more
#VU24958 - Out-of-bounds read
CVE-2020-6405		 CWE-125 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 05.02.2020 SB2019122301
SB2020020601
SB2020020614
and 22 more
#VU24488 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-7595		 CWE-835 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 22.01.2020 SB2020012220
SB2020021011
SB2020052301
and 30 more
#VU24487 - Missing release of memory after effective lifetime
CVE-2019-20388		 CWE-401 Medium
No
No
 1.10.2, 1.11.0, 1.12.0 22.01.2020 SB2020012220
SB2020052301
SB2020062607
and 28 more
#VU16937 - Cross-Site Request Forgery (CSRF)
CVE-2018-1000858		 CWE-352 Low
No
No
 1.10.2 10.01.2019 SB2019011303
SB2021052216
SB2022080325
and 3 more


Showing elements 401 - 420 out of 445