Known vulnerabilities in Service Telemetry Framework - page 3

Vendor: Red Hat Inc.
Software: Service Telemetry Framework
Software CPE: cpe:2.3:a:red_hat:service_telemetry_framework:*:*:*:*:*:red_hat_openstack:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 186
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Service Telemetry Framework Service Telemetry Framework is affected by 186 known vulnerabilities: 3 critical, 52 high, 89 medium, 42 low Critical High Medium Low

Vulnerabilities (186)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82078 - Use After Free
CVE-2022-48560		 CWE-416 Medium
No
No
 1.5.4 17.10.2023 SB2023101708
SB2023101712
SB20231017145
and 29 more
#VU82077 - Resource exhaustion
CVE-2022-48564		 CWE-400 Medium
No
No
 1.5.4 17.10.2023 SB2023101707
SB20231123125
SB2023112746
and 19 more
#VU79878 - Incorrect Authorization
CVE-2023-3899		 CWE-863 Low
No
No
 1.5.2 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 1.5.4 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 1.5.4 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 1.5.4 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU75482 - Integer overflow
CVE-2022-48468		 CWE-190 High
No
No
 1.5.4 25.04.2023 SB2022072825
SB2023042551
SB2023050992
and 50 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 1.5.2 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 1.5.2 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 1.5.4 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 1.5.4 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 1.5.4 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 1.5.4 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU69337 - Integer overflow
CVE-2022-42898		 CWE-190 Medium
No
No
 1.5.2 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 1.5.4 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 1.5.4 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 1.5.4 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 1.5.4 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 1.5.4 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 1.5.4 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more


Showing elements 41 - 60 out of 186