Known vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT) - page 3

Vendor: Red Hat Inc.

Software: Red Hat OpenShift distributed tracing (RHOSDT)

Software CPE: cpe:2.3:a:red_hat:rhosdt:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 74

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (74)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU83546 - Resource exhaustion CVE-2023-45142	CWE-400	Medium	No	No	3.0.0	29.11.2023	SB2023112912 SB2023112913 SB2023112949 and 54 more
#VU82608 - Improper Verification of Cryptographic Signature CVE-2023-46234	CWE-347	Medium	No	No	-	31.10.2023	SB2023103186 SB20231031104 SB2023110166 and 14 more
#VU82064 - Resource exhaustion CVE-2023-39325	CWE-400	Medium	No	No	-	16.10.2023	SB2023101651 SB2023101652 SB2023101653 and 341 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	-	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 648 more
#VU80575 - Improper input validation CVE-2023-39322	CWE-20	Medium	No	No	-	08.09.2023	SB2023090845 SB2023091875 SB2023091876 and 51 more
#VU80574 - Improper input validation CVE-2023-39321	CWE-20	Medium	No	No	-	08.09.2023	SB2023090845 SB2023091875 SB2023091876 and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39319	CWE-79	Medium	No	No	-	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39318	CWE-79	Medium	No	No	-	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 61 more
#VU80228 - Cleartext Transmission of Sensitive Information CVE-2023-40217	CWE-319	Medium	No	No	-	01.09.2023	SB2023090142 SB2023090143 SB2023090144 and 139 more
#VU78913 - Improper Certificate Validation CVE-2023-29409	CWE-295	Medium	No	No	-	03.08.2023	SB2023080320 SB2023080321 SB2023080370 and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2023-29406	CWE-644	Medium	No	No	-	17.07.2023	SB2023071737 SB2023071738 SB2023071739 and 94 more
#VU74574 - Improper Control of Generation of Code ('Code Injection') CVE-2023-24538	CWE-94	High	No	No	2.9.0	06.04.2023	SB2023040668 SB2023040678 SB2023040679 and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-24537	CWE-835	Medium	No	No	2.9.0	06.04.2023	SB2023040668 SB2023040678 SB2023040679 and 87 more
#VU74572 - Resource Management Errors CVE-2023-24536	CWE-399	Medium	No	No	2.9.0	06.04.2023	SB2023040668 SB2023040678 SB2023040679 and 80 more
#VU74571 - Resource exhaustion CVE-2023-24534	CWE-400	Medium	No	No	2.9.0	06.04.2023	SB2023040668 SB2023040678 SB2023040679 and 85 more
#VU72125 - Inadequate Encryption Strength CVE-2023-0361	CWE-326	Medium	No	No	2.8.0	11.02.2023	SB2023021103 SB2023021109 SB2023021561 and 88 more
#VU70334 - Allocation of Resources Without Limits or Throttling CVE-2022-41717	CWE-770	Medium	Available	No	2.8.0	14.12.2022	SB2022121432 SB2022121433 SB2022121435 and 185 more
#VU64682 - Resource exhaustion CVE-2022-32206	CWE-400	Medium	No	No	2.6.0	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 80 more
#VU63777 - Exposure of sensitive information to an unauthorized actor CVE-2022-1650	CWE-200	Medium	No	No	2.6.0	30.05.2022	SB2022053001 SB2022053002 SB2022061422 and 16 more
#VU61668 - Exposure of sensitive information to an unauthorized actor CVE-2022-0536	CWE-200	Low	No	No	2.6.0	28.03.2022	SB2022032841 SB2022032843 SB2022042561 and 27 more

Showing elements 41 - 60 out of 74

Known vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT) - page 3

Breakdown by Severity Chart

Vulnerabilities (74)

Please verify you're human