Known vulnerabilities in Service Telemetry Framework - page 5

Vendor: Red Hat Inc.
Software: Service Telemetry Framework
Software CPE: cpe:2.3:a:red_hat:service_telemetry_framework:*:*:*:*:*:red_hat_openstack:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 186
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Service Telemetry Framework Service Telemetry Framework is affected by 186 known vulnerabilities: 3 critical, 52 high, 89 medium, 42 low Critical High Medium Low

Vulnerabilities (186)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 - 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 - 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 - 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 - 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 - 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 - 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU50075 - Reachable Assertion
CVE-2021-3326		 CWE-617 Medium
No
No
 - 27.01.2021 SB2021012804
SB2021020710
SB2021020711
and 34 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618		 CWE-835 Medium
No
No
 - 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU48944 - Memory corruption
CVE-2020-29361		 CWE-119 Medium
No
No
 - 14.12.2020 SB2020121401
SB2020121402
SB2020121422
and 22 more
#VU48945 - Memory corruption
CVE-2020-29362		 CWE-119 Medium
No
No
 - 14.12.2020 SB2020121401
SB2020121402
SB2020121423
and 21 more
#VU46803 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9952		 CWE-79 Medium
No
No
 - 18.09.2020 SB2020091802
SB2020092329
SB2020112408
and 9 more
#VU49120 - Cleartext Storage of Sensitive Information
CVE-2020-14391		 CWE-312 Low
No
No
 - 01.09.2020 SB2020122208
SB2021011210
SB2021012638
and 2 more
#VU32970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9925		 CWE-79 Medium
No
No
 - 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32969 - Permissions, Privileges, and Access Controls
CVE-2020-9915		 CWE-264 Medium
No
No
 - 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU31920 - Memory corruption
CVE-2020-15503		 CWE-119 Medium
No
No
 - 27.07.2020 SB2020070228
SB2020072741
SB2020080204
and 12 more
#VU30165 - Out-of-bounds write
CVE-2020-15358		 CWE-787 Low
No
No
 - 27.06.2020 SB2020062703
SB2020072756
SB2020102002
and 27 more
#VU28227 - Integer overflow
CVE-2020-13434		 CWE-190 Medium
No
No
 - 25.05.2020 SB2020052519
SB2020080704
SB2020052729
and 27 more
#VU30304 - Use After Free
CVE-2020-11793		 CWE-416 High
No
No
 - 17.04.2020 SB2020041720
SB2020050206
SB2020042012
and 13 more
#VU26076 - Use After Free
CVE-2020-10018		 CWE-416 High
No
No
 - 13.03.2020 SB2020031317
SB2020031318
SB2020031709
and 14 more


Showing elements 81 - 100 out of 186