Known vulnerabilities in Self Node Remediation Operator

Vendor: Red Hat Inc.
Software: Self Node Remediation Operator
Software CPE: cpe:2.3:a:red_hat:self_node_remediation_operator:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 56
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Self Node Remediation Operator Self Node Remediation Operator is affected by 56 known vulnerabilities: 8 high, 32 medium, 16 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 0.5.1, 0.7.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 0.5.1, 0.7.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 649 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 0.5.1 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 0.5.1, 0.7.1 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU77780 - Memory corruption
CVE-2020-24736		 CWE-119 Low
No
No
 0.5.1 29.06.2023 SB2023062903
SB2023062908
SB2023062968
and 45 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 0.5.1 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 0.5.1 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 0.5.1 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 0.5.1 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 0.5.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70461 - Improper Privilege Management
CVE-2022-4415		 CWE-269 Low
No
No
 0.5.1 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 0.5.1 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 0.5.1 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 0.5.1 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 0.5.1 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 0.5.1 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 0.5.1 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 0.5.1 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 0.5.1 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709		 CWE-79 Medium
No
No
 0.5.1 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more


Showing elements 1 - 20 out of 56