Known vulnerabilities in servicemesh-grafana (Red Hat package)

Vendor: Red Hat Inc.
Software: servicemesh-grafana (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:servicemesh-grafana_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting servicemesh-grafana (Red Hat package) servicemesh-grafana (Red Hat package) is affected by 10 known vulnerabilities: 1 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103054 - Incorrect Regular Expression
CVE-2020-7662		 CWE-185 Medium
No
No
 6.2.2-38.el8 20.01.2025 SB2025012075
SB2025012076
SB2020070752
#VU86835 - Deserialization of Untrusted Data
CVE-2020-7660		 CWE-502 High
No
No
 6.2.2-38.el8 27.02.2024 SB2024022730
SB2020070752
SB2026031635
and 2 more
#VU56147 - Excessive Iteration
CVE-2021-32778		 CWE-834 Medium
No
No
 7.2.1-2.el8 30.08.2021 SB2021083002
SB2021083003
SB2021120816
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 6.4.3-19.el8 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586		 CWE-362 Medium
No
No
 6.4.3-19.el8 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more
#VU28581 - Server-Side Request Forgery (SSRF)
CVE-2020-13379		 CWE-918 Medium
Available
No
 6.2.2-38.el8 04.06.2020 SB2020060421
SB2020062606
SB2020062610
and 10 more
#VU28223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13430		 CWE-79 Low
No
No
 6.2.2-38.el8 25.05.2020 SB2020052517
SB2020070752
#VU27396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12245		 CWE-79 Medium
No
No
 6.2.2-38.el8 28.04.2020 SB2020042825
SB2020063016
SB2020072802
and 3 more
#VU30299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12052		 CWE-79 Low
No
No
 6.2.2-38.el8 27.04.2020 SB2020042723
SB2020070752
#VU22824 - Resource exhaustion
CVE-2019-11253		 CWE-400 Medium
No
No
 6.2.2-38.el8 18.11.2019 SB2019101712
SB2019111815
SB2020020731
and 12 more