Known vulnerabilities in Self Node Remediation Operator - page 3

Vendor: Red Hat Inc.
Software: Self Node Remediation Operator
Software CPE: cpe:2.3:a:red_hat:self_node_remediation_operator:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 56
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Self Node Remediation Operator Self Node Remediation Operator is affected by 56 known vulnerabilities: 8 high, 32 medium, 16 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 0.5.1 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU77780 - Memory corruption
CVE-2020-24736		 CWE-119 Low
No
No
 0.5.1 29.06.2023 SB2023062903
SB2023062908
SB2023062968
and 45 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 0.5.1 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 0.5.1 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 0.5.1 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 0.5.1 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 0.5.1 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709		 CWE-79 Medium
No
No
 0.5.1 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 0.4.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 0.4.1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 0.4.1 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64508 - Out-of-bounds read
CVE-2022-1927		 CWE-125 Low
No
No
 0.4.1 20.06.2022 SB2022062022
SB2022080332
SB2022080610
and 49 more
#VU64506 - Out-of-bounds write
CVE-2022-1897		 CWE-787 Low
No
No
 0.4.1 20.06.2022 SB2022062022
SB2022070807
SB2022080332
and 48 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 0.4.1 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU63487 - Out-of-bounds write
CVE-2022-1785		 CWE-787 High
No
No
 0.4.1 20.05.2022 SB2022052017
SB2022062022
SB2022063027
and 47 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 0.4.1 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more


Showing elements 41 - 60 out of 56