Known vulnerabilities in Red Hat OpenShift Serverless - page 8

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Serverless
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_serverless:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 445
Public exploits: 25
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Serverless Red Hat OpenShift Serverless is affected by 445 known vulnerabilities: 2 critical, 85 high, 252 medium, 106 low Critical High Medium Low

Vulnerabilities (445)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 1.31.1 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 1.30.2 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU82143 - Improper input validation
CVE-2023-22025		 CWE-20 Low
No
No
 1.30.2 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 36 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 1.30.2 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.30.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 1.30.2 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 1.30.2 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 1.30.2 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 1.30.2 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80813 - Security Features
CVE-2023-4853		 CWE-254 Medium
No
No
 1.30.1 15.09.2023 SB2023091507
SB2023092243
SB2023092247
and 13 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 1.30.2 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 1.30.2 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 1.30.1 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 1.30.2 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 1.30.1 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 1.30.1, 1.30.2 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.30.1 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.30.1 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.30.1 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.30.1 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more


Showing elements 141 - 160 out of 445