Known vulnerabilities in Service Telemetry Framework - page 9

Vendor: Red Hat Inc.
Software: Service Telemetry Framework
Software CPE: cpe:2.3:a:red_hat:service_telemetry_framework:*:*:*:*:*:red_hat_openstack:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 186
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Service Telemetry Framework Service Telemetry Framework is affected by 186 known vulnerabilities: 3 critical, 52 high, 89 medium, 42 low Critical High Medium Low

Vulnerabilities (186)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50329 - Out-of-bounds read
CVE-2019-25013		 CWE-125 Low
No
No
 - 04.01.2021 SB2021020413
SB2021020414
SB2021020710
and 36 more
#VU48062 - Memory corruption
CVE-2019-8835		 CWE-119 High
No
No
 - 27.10.2020 SB2020020537
SB2020122208
SB2021011210
and 7 more
#VU29116 - Out-of-bounds read
CVE-2019-20454		 CWE-125 Medium
No
No
 - 17.06.2020 SB2020021421
SB2020061707
SB2020110528
and 14 more
#VU30281 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-20807		 CWE-78 Low
No
No
 - 28.05.2020 SB2020052815
SB2020061148
SB2020110918
and 9 more
#VU26756 - Resource Management Errors
CVE-2020-1730		 CWE-399 Medium
No
No
 - 10.04.2020 SB2020041003
SB2020041004
SB2020041005
and 25 more
#VU26432 - Business Logic Errors (3.0)
CVE-2020-3885		 CWE-840 Low
No
No
 - 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3902		 CWE-79 Low
No
No
 - 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 10 more
#VU26430 - Memory corruption
CVE-2020-3899		 CWE-119 High
No
No
 - 27.03.2020 SB2020032715
SB2020032719
SB2020042823
and 12 more
#VU26428 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3894		 CWE-362 Medium
Available
No
 - 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26427 - Memory corruption
CVE-2020-3900		 CWE-119 High
No
No
 - 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26426 - Memory corruption
CVE-2020-3895		 CWE-119 High
No
No
 - 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26424 - Type confusion
CVE-2020-3901		 CWE-843 High
No
No
 - 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26422 - Type confusion
CVE-2020-3897		 CWE-843 High
No
No
 - 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU25382 - Memory corruption
CVE-2020-3868		 CWE-119 High
No
No
 - 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3867		 CWE-79 Medium
No
No
 - 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25380 - Origin Validation Error
CVE-2020-3865		 CWE-346 Medium
No
No
 - 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25379 - Origin Validation Error
CVE-2020-3864		 CWE-346 Medium
No
No
 - 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25375 - Memory corruption
CVE-2020-3862		 CWE-119 Low
No
No
 - 14.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU24721 - Cryptographic Issues
CVE-2019-13627		 CWE-310 Low
No
No
 - 29.01.2020 SB2019092519
SB2020011468
SB2019092430
and 10 more
#VU23508 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14889		 CWE-78 Medium
No
No
 - 11.12.2019 SB2019121035
SB2019121107
SB2019121701
and 21 more


Showing elements 161 - 180 out of 186