Known vulnerabilities in Red Hat OpenShift Serverless - page 4

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 1 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU107522 - Improper input validation
CVE-2025-30691		 CWE-20 Medium
No
No
 1 16.04.2025 SB20250416146
SB20250416159
SB2025042933
and 33 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 1 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 1 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103932 - Missing release of memory after effective lifetime
CVE-2025-22866		 CWE-401 Low
No
No
 1 12.02.2025 SB20250212100
SB20250212101
SB20250212102
and 27 more
#VU103504 - Out-of-bounds write
CVE-2025-24528		 CWE-787 Medium
No
No
 1 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU98137 - Allocation of Resources Without Limits or Throttling
CVE-2024-40094		 CWE-770 Medium
Available
No
 1 08.10.2024 SB2024100835
SB2024100936
SB2024101593
and 27 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 1 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 1 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 1 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97683 - Allocation of Resources Without Limits or Throttling
CVE-2024-8391		 CWE-770 Medium
No
No
 1 24.09.2024 SB2024092475
SB2024092527
SB2024100250
and 2 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 1 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 1 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 1 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 1 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 1 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 1 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more


Showing elements 61 - 80 out of 445