Known vulnerabilities in Red Hat OpenShift Serverless - page 5

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91686 - Cleartext Storage of Sensitive Information
CVE-2024-2700		 CWE-312 Low
No
No
 1.33.0 11.06.2024 SB2024061114
SB20240611171
SB2024061840
and 7 more
#VU88799 - Permissions, Privileges, and Access Controls
CVE-2024-1249		 CWE-264 Medium
No
No
 1.33.0 17.04.2024 SB20240417142
SB20240417148
SB20240417149
and 5 more
#VU88795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6717		 CWE-79 Medium
No
No
 1.33.0 17.04.2024 SB20240417142
SB2024061850
SB2024062405
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 1.33.0 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 1.33.0 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87538 - Resource exhaustion
CVE-2024-28180		 CWE-400 Medium
No
No
 1.33.0 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 1, 1.33.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 1.33.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 1.33.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 1.33.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.33.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 1.33.0 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 1.33.0 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86861 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22371		 CWE-200 Low
No
No
 1.33.0 27.02.2024 SB2024022034
SB2024032819
SB2024061872
and 4 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 1.33.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.33.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU85658 - Insufficient Verification of Data Authenticity
CVE-2023-7008		 CWE-345 Medium
No
No
 1.33.0 22.01.2024 SB2024012238
SB2024012239
SB2024012240
and 38 more
#VU84540 - Unchecked Return Value
CVE-2023-6918		 CWE-252 Low
No
No
 1.33.0 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU84538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-6004		 CWE-78 Medium
No
No
 1.33.0 19.12.2023 SB2023121905
SB2023121906
SB2023121910
and 58 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 1.33.0 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more


Showing elements 81 - 100 out of 445