Known vulnerabilities in Red Hat OpenShift Serverless - page 8

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 1 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 1 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97683 - Allocation of Resources Without Limits or Throttling
CVE-2024-8391		 CWE-770 Medium
No
No
 1 24.09.2024 SB2024092475
SB2024092527
SB2024100250
and 2 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 1 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 1 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 1 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88799 - Permissions, Privileges, and Access Controls
CVE-2024-1249		 CWE-264 Medium
No
No
 1.33.0 17.04.2024 SB20240417142
SB20240417148
SB20240417149
and 5 more
#VU88795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6717		 CWE-79 Medium
No
No
 1.33.0 17.04.2024 SB20240417142
SB2024061850
SB2024062405
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 1 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 1 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 1.33.0 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86861 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22371		 CWE-200 Low
No
No
 1.33.0 27.02.2024 SB2024022034
SB2024032819
SB2024061872
and 4 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.33.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 103 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 1 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU66436 - Out-of-bounds write
CVE-2021-33938		 CWE-787 Low
No
No
 1.19.0 12.08.2022 SB2021090721
SB2022081221
SB2021110327
and 5 more
#VU66435 - Out-of-bounds write
CVE-2021-33930		 CWE-787 Low
No
No
 1.19.0 12.08.2022 SB2021090721
SB2022081221
SB2021110327
and 5 more
#VU66434 - Out-of-bounds write
CVE-2021-33929		 CWE-787 Low
No
No
 1.19.0 12.08.2022 SB2021090721
SB2022081221
SB2021110327
and 5 more
#VU66433 - Out-of-bounds write
CVE-2021-33928		 CWE-787 Low
No
No
 1.19.0 12.08.2022 SB2021090721
SB2022081221
SB2021110327
and 5 more


Showing elements 141 - 160 out of 445