Red Hat Schwachstellen

Zeitverlauf

Typ

Not Defined324
Operating System212
Application Server Software181
Virtualization Software111
Cloud Software71

Produkt

Red Hat Enterprise Linux111
Red Hat Linux80
Red Hat JBoss Enterprise Application Platform62
Red Hat Ansible36
Red Hat Ansible Tower29

Massnahmen

Official Fix621
Temporary Fix0
Workaround5
Unavailable1
Not Defined317

Ausnutzbarkeit

High18
Functional0
Proof-of-Concept79
Unproven36
Not Defined811

Zugriffsart

Not Defined0
Physical1
Local270
Adjacent106
Network567

Authentisierung

Not Defined0
High12
Low316
None616

Benutzeraktivität

Not Defined0
Required122
None822

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤4127
≤5132
≤6233
≤7184
≤8137
≤979
≤1048

CVSSv3 Temp

≤10
≤20
≤36
≤4137
≤5147
≤6262
≤7180
≤8119
≤966
≤1027

VulDB

≤10
≤21
≤313
≤4165
≤5129
≤6244
≤7139
≤8142
≤963
≤1048

NVD

≤10
≤20
≤33
≤49
≤512
≤664
≤763
≤875
≤943
≤1032

CNA

≤10
≤20
≤30
≤43
≤51
≤60
≤71
≤82
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k2
<5k125
<10k311
<25k444
<50k60
<100k0
≥100k0

Exploit heute

<1k631
<2k50
<5k108
<10k105
<25k50
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (211): 3scale (1), 3scale API Management (1), 3scale API Management Platform (4), 389 Directory Server (3), 389-ds-base (1), AMQ (2), AMQ Broker (3), Advanced Cluster Management for Kubernetes (3), Advanced Cluster Security for Kubernetes (1), Aeolus Conductor (1), Ansible (36), Ansible Automation Platform (3), Ansible Base (1), Ansible Community (1), Ansible Engine (16), Ansible Playbooks (1), Ansible Tower (29), Ansible Vault (1), Application Platforms (1), Automatic Bug Reporting Tool (3), Business Central (1), CMAN (1), Cairo (1), Ceph (1), Ceph Storage (5), Ceph Storage RGW (1), Ceph Storage RadosGW (2), Certificate Server (2), Certificate System (8), Certification (1), CloudForms (19), CloudForms 2 Management Engine (1), CloudForms 3.0 Management Engine (8), CloudForms 3.1 Management Engine (2), CloudForms Cloud Engine (2), CloudForms Management Engine (5), Cloudforms (1), Cloudforms 3.0 Management Engine (4), Cluster Suite (2), Conga (3), Cygwin (1), DataGrid (1), Decision Manager (2), Desktop (1), Directory Server (12), Discovery Server (1), DocBook Stylesheets (1), Docker (1), Dogtag Certificate System (3), Enterprise Application Platform (2), Enterprise Linux (111), Enterprise Linux Desktop (9), Enterprise Linux HPC Node (5), Enterprise Linux Kernel (1), Enterprise Linux OpenStack (1), Enterprise Linux OpenStack Platform (1), Enterprise Linux Server (5), Enterprise Linux Server Aus (1), Enterprise Linux Server Supplementary (1), Enterprise Linux Workstation (6), Enterprise MRG (13), Enterprise Mrg (4), Enterprise Virtualization (18), Enterprise Virtualization Hypervisor (2), Enterprise Virtualization Manager (19), Evince (4), Fedora (6), Fedora Core (6), Fedora Directory Server (1), Feedhenry Enterprise Mobile Application Platform (1), FreeIPA (6), Glint (1), GlusterFS (7), Gluster Storage (6), Gluster Storage Server (1), IcedTea (3), IcedTea-Web (5), IcedTea6 (2), Infinispan (1), InterChange (1), JBoss (15), JBoss A-MQ (6), JBoss Application Server (4), JBoss BPMS (4), JBoss BPM Suite (8), JBoss BRMS (4), JBoss Core Services httpd (2), JBoss Data Grid (2), JBoss Data Virtualization (3), JBoss EAP (11), JBoss Enterprise (10), JBoss Enterprise Application Platform (62), JBoss Enterprise BRMS Platform (3), JBoss Enterprise Portal Platform (11), JBoss Enterprise SOA Platform (2), JBoss Fuse (4), JBoss Operations Network (13), JBoss Portal (5), JBoss Remoting (2), JBossWeb (1), JBoss Web Framework Kit (4), JBoss Web Server (1), JBoss WildFly Application Server (1), Jboss (1), Jboss Enterprise Soa Platform (1), Jboss Enterprise Web (1), Jboss Fuse Esb Enterprise (1), Jbpm-designer (1), KIE Server (1), KON (2), Kernel (1), KeyCloak (4), Kie Workbench (1), Linux (83), Linux Advanced Workstation (1), Linux Enterprise (1), Luci (1), ManageIQ EVM (1), ManageIQ Enterprise Virtualization Manager (1), Mobile Application Platform (1), NetworkManager (1), Network Satelite Server (1), Network Satellite (11), Network Satellite Server (6), Nfs Utils (1), OpenShift (14), OpenShift API Management (1), OpenShift Assisted Installer (1), OpenShift Container Platform (1), OpenShift Container Platform 3 (1), OpenShift Enterprise (14), OpenShift Origin (5), OpenStack (12), OpenStack Platform (2), OpenStack Platform Director (2), Openshift (2), Openshift Container Storage (1), Openshift node-utils (1), Openstack (4), Openstack Enterprise (1), Openstack Folsom (2), PXE Server (1), PackStack (1), PolicyKit (1), Process Automation (2), Process Automation Manager (1), Quay (5), QuickStart Cloud Installer (4), RESTEasy (3), RHN (1), RPM (1), RPM Package Manager (8), Red Hat Certificate System (2), Remoting for SOA Platform (1), RichFaces (1), SDL (1), Satellite (24), Single Sign-On (3), Single Sign On (1), Spacewalk (9), Storage Console (1), Storage Server (2), Stronghold (2), Subscription Asset Manager (2), TUX HTTP Server (1), Uberfire (1), Update Infrastructure (1), Virtual Desktop Service Manager (1), WildFly (9), Wildfly Elytron (1), XML Language Server (1), XML Language Support (1), adminutil (1), cman (1), containers-image (1), dtach (1), enterprise linux (1), gfs2-utils (1), hawtjni (1), jboss-client (1), jboss-remoting (1), katello-headpin (1), kdelibs (1), kexec-tools (3), libvirt (17), livecd-tools (1), mcstrans (1), open-iscsi (1), openshift (5), openshift-clients (1), openstack (1), openstack-neutron (1), openstack-octavia (1), policycoreutils (2), ppp (1), redhat-certification (5), redhat-sso-7 (1), rhevm-dwh (1), rhevm-reports (3), rhncfg (1), rpcbind (1), sos (2), spacewalk-java (2), spice-activex (1), spice-gtk (1), spice-xpi (4), sysreport (1), system-config-firewall (1), system-config-printer (1), up2date (1), yum-rhn-plugin (1)

Link to Vendor Website: https://www.redhat.com/

VeröffentlichtBaseTempSchwachstelleProdAusMasCTIEPSSCVE
25.03.20233.53.4Red Hat OpenShift Assisted Installer Discovery ISO Generation Information DisclosureVirtualization SoftwareNot DefinedOfficial Fix0.040.00045CVE-2021-3684
28.02.20234.94.9Red Hat Discovery Server LDAP Information DisclosureUnbekanntNot DefinedNot Defined0.000.00043CVE-2023-1055
18.01.20233.93.9Red Hat OpenShift Block Cipher schwache VerschlüsselungVirtualization SoftwareNot DefinedOfficial Fix0.060.00046CVE-2023-0296
13.01.20237.07.0Red Hat Advanced Cluster Management for Kubernetes API Endpoint erweiterte RechteVirtualization SoftwareNot DefinedNot Defined0.030.00044CVE-2022-3841
16.12.20226.26.2Red Hat Satellite HTTP Header erweiterte RechteUnbekanntNot DefinedNot Defined0.030.00046CVE-2022-4130
07.12.20223.53.4Red Hat OpenStack Dashboard Cross Site ScriptingCloud SoftwareNot DefinedNot Defined0.070.00043CVE-2022-4133
20.10.20224.54.5Red Hat OpenShift server_priv.pem erweiterte RechteVirtualization SoftwareNot DefinedNot Defined0.040.00042CVE-2013-4281
20.10.20226.16.1Red Hat 3scale API Management Information DisclosureAutomation SoftwareNot DefinedNot Defined0.000.00048CVE-2022-1414
20.10.20226.96.9Red Hat OpenShift Add-on Script erweiterte RechteVirtualization SoftwareNot DefinedNot Defined0.040.00048CVE-2013-4253
18.10.20227.17.1Red Hat Decision Manager/Process Automation Business Central Console erweiterte RechteAutomation SoftwareNot DefinedNot Defined0.000.00050CVE-2019-14841
18.10.20225.55.5Red Hat Decision Manager/Process Automation Information DisclosureAutomation SoftwareNot DefinedNot Defined0.010.00084CVE-2019-14840
18.10.20224.54.5Red Hat OpenShift Enterprise Hawkular Metric erweiterte RechteVirtualization SoftwareNot DefinedNot Defined0.030.00045CVE-2017-7517
15.10.20225.05.0Red Hat 389-ds-base Content Synchronization Plugin Denial of ServiceUnbekanntNot DefinedNot Defined0.000.00044CVE-2022-2850
13.09.20225.55.5Red Hat WildFly erweiterte RechteApplication Server SoftwareNot DefinedNot Defined0.050.00087CVE-2022-1278
02.09.20224.94.9Red Hat OpenShift Container Platform HAProxy Configuration File Denial of ServiceVirtualization SoftwareNot DefinedNot Defined0.000.00044CVE-2022-1677
02.09.20226.06.0Red Hat Openshift schwache AuthentisierungVirtualization SoftwareNot DefinedNot Defined0.000.00049CVE-2022-1632
02.09.20226.06.0Red Hat Advanced Cluster Management for Kubernetes Search Filter Parser SQL InjectionVirtualization SoftwareNot DefinedNot Defined0.000.00044CVE-2022-2238
02.09.20226.16.1Red Hat Advanced Cluster Security for Kubernetes Notifier Secret Information DisclosureVirtualization SoftwareNot DefinedOfficial Fix0.040.00064CVE-2022-1902
01.09.20226.06.0Red Hat OpenShift Subdomain erweiterte RechteVirtualization SoftwareNot DefinedNot Defined0.030.00000CVE-2022-2220
26.08.20226.86.8Red Hat Satellite erweiterte RechteUnbekanntNot DefinedNot Defined0.050.00050CVE-2021-3414
26.08.20223.53.5Red Hat JBoss Core Services httpd Directory TraversalApplication Server SoftwareNot DefinedNot Defined0.030.00047CVE-2021-3688
26.08.20225.55.5Red Hat Ansible Tower Job Isolation erweiterte RechteUnbekanntNot DefinedNot Defined0.060.00043CVE-2021-4112
26.08.20224.54.5Red Hat Ceph Storage schwache VerschlüsselungUnbekanntNot DefinedOfficial Fix0.030.00060CVE-2021-3979
25.08.20224.44.3Red Hat AMQ Broker Messages Denial of ServiceUnbekanntNot DefinedOfficial Fix0.000.00088CVE-2021-4040
25.08.20224.54.4Red Hat Satellite Candlepin erweiterte RechteUnbekanntNot DefinedOfficial Fix0.030.00045CVE-2021-4142

919 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 919 results.

◂ ZurückÜbersichtWeiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!