Known vulnerabilities in Service Telemetry Framework - page 2

Vendor: Red Hat Inc.
Software: Service Telemetry Framework
Software CPE: cpe:2.3:a:red_hat:service_telemetry_framework:*:*:*:*:*:red_hat_openstack:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 186
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Service Telemetry Framework Service Telemetry Framework is affected by 186 known vulnerabilities: 3 critical, 52 high, 89 medium, 42 low Critical High Medium Low

Vulnerabilities (186)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 1.5.4 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.5.4 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.5.4 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 1.5.4 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 1.5.4 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 1.5.4 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU81044 - Out-of-bounds read
CVE-2023-39615		 CWE-125 Medium
No
No
 1.5.4 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU77780 - Memory corruption
CVE-2020-24736		 CWE-119 Low
No
No
 1.5.4 29.06.2023 SB2023062903
SB2023062908
SB2023062968
and 45 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 1.5.4 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 1.5.4 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 1.5.4 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU75741 - Improper input validation
CVE-2023-1667		 CWE-20 Medium
No
No
 1.5.4 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 75 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 1.5.4 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.5.4 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.5.4 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 1.5.4 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 1.5.4 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 1.5.4 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU48269 - Security Features
CVE-2020-17049		 CWE-254 Low
No
No
 1.5.4 10.11.2020 SB2020111029
SB2021111015
SB2022121006
and 18 more
#VU48418 - Out-of-bounds read
CVE-2020-28241		 CWE-125 Medium
No
No
 1.5.4 06.11.2020 SB2020110615
SB2020111401
SB2020111404
and 32 more


Showing elements 21 - 40 out of 186