Known vulnerabilities in Service Telemetry Framework

Vendor: Red Hat Inc.
Software: Service Telemetry Framework
Software CPE: cpe:2.3:a:red_hat:service_telemetry_framework:*:*:*:*:*:red_hat_openstack:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 186
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Service Telemetry Framework Service Telemetry Framework is affected by 186 known vulnerabilities: 3 critical, 52 high, 89 medium, 42 low Critical High Medium Low

Vulnerabilities (186)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 1.5.4 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 1.5.4 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85268 - Cross-Site Request Forgery (CSRF)
CVE-2023-5455		 CWE-352 Medium
No
No
 1.5.4 10.01.2024 SB2024011032
SB2024011039
SB2024011040
and 17 more
#VU84985 - Out-of-bounds read
CVE-2023-7104		 CWE-125 Medium
No
No
 1.5.4 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 1.5.4 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 1.5.4 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 1.5.4 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 1.5.4 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 1.5.4 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 1.5.4 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 1.5.4 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 1.5.4 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 1.5.4 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74146 - Improper Privilege Management
CVE-2023-26604		 CWE-269 Low
No
No
 1.5.4 28.03.2023 SB2023032869
SB2023032871
SB2023040540
and 56 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.5.4 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 1.5.4 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.5.4 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU70461 - Improper Privilege Management
CVE-2022-4415		 CWE-269 Low
No
No
 1.5.4 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 1.5.4 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 1.5.4 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more


Showing elements 1 - 20 out of 186