Red Hat Sårbarheter

Tidslinje

Typ

Produkt

Red Hat Enterprise Linux113
Red Hat Linux80
Red Hat JBoss Enterprise Application Platform65
Red Hat Ansible41
Red Hat Ansible Tower29

Åtgärd

Official Fix639
Temporary Fix0
Workaround5
Unavailable1
Not Defined362

Utnyttjbarhet

High19
Functional0
Proof-of-Concept79
Unproven36
Not Defined873

Åtkomstvektor

Not Defined0
Physical1
Local278
Adjacent136
Network592

Autentisering

Not Defined0
High16
Low359
None632

Användarinteraktion

Not Defined0
Required133
None874

C3BM Index

CVSSv3 Base

≤10
≤20
≤35
≤4141
≤5143
≤6252
≤7186
≤8155
≤976
≤1049

CVSSv3 Temp

≤10
≤20
≤37
≤4151
≤5158
≤6281
≤7183
≤8137
≤963
≤1027

VulDB

≤10
≤21
≤317
≤4185
≤5139
≤6261
≤7143
≤8150
≤963
≤1048

NVD

≤10
≤20
≤33
≤49
≤512
≤668
≤766
≤880
≤945
≤1036

CNA

≤10
≤20
≤31
≤49
≤515
≤618
≤719
≤830
≤910
≤103

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k1
<2k3
<5k127
<10k365
<25k451
<50k60
<100k0
≥100k0

Utnyttja idag

<1k661
<2k44
<5k138
<10k136
<25k28
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (242): 3scale (1), 3scale API Management (1), 3scale API Management Platform (4), 3scale Admin Portal (1), 389 Directory Server (3), 389-ds-base (1), A-MQ Streams (1), AMQ (2), AMQ Broker (5), Advanced Cluster Management for Kubernetes (6), Advanced Cluster Security (1), Advanced Cluster Security for Kubernetes (1), Aeolus Conductor (1), Ansible (41), Ansible Automation Hub (1), Ansible Automation Platform (6), Ansible Automation Platform (1), Ansible Base (1), Ansible Community (1), Ansible Engine (16), Ansible Playbooks (1), Ansible Tower (29), Ansible Vault (1), Application Platforms (1), Automatic Bug Reporting Tool (3), Business Central (1), CMAN (1), Cairo (1), Ceph (1), Ceph Storage (5), Ceph Storage RGW (1), Ceph Storage RadosGW (2), Certificate Server (2), Certificate System (8), Certification (1), CloudForms (19), CloudForms 2 Management Engine (1), CloudForms 3.0 Management Engine (8), CloudForms 3.1 Management Engine (2), CloudForms Cloud Engine (2), CloudForms Management Engine (5), Cloudforms (1), Cloudforms 3.0 Management Engine (4), Cluster Suite (2), Conga (3), Cygwin (1), Data Grid (1), DataGrid (1), Decision Manager (2), Dependency Analytics Plugin (1), Desktop (1), Developer Hub (1), Directory Server (12), Discovery Server (1), DocBook Stylesheets (1), Docker (1), Dogtag Certificate System (3), Enterprise Application Platform (3), Enterprise Linux (113), Enterprise Linux Desktop (9), Enterprise Linux HPC Node (5), Enterprise Linux Kernel (1), Enterprise Linux OpenStack (1), Enterprise Linux OpenStack Platform (1), Enterprise Linux Server (5), Enterprise Linux Server Aus (1), Enterprise Linux Server Supplementary (1), Enterprise Linux Workstation (6), Enterprise MRG (13), Enterprise Mrg (4), Enterprise Virtualization (18), Enterprise Virtualization Hypervisor (2), Enterprise Virtualization Manager (19), Evince (4), Fedora (6), Fedora Core (6), Fedora Directory Server (1), Feedhenry Enterprise Mobile Application Platform (1), FreeIPA (6), Glint (1), GlusterFS (7), Gluster Storage (6), Gluster Storage Server (1), IcedTea (3), IcedTea-Web (5), IcedTea6 (2), Infinispan (2), InterChange (1), JBoss (15), JBoss A-MQ (6), JBoss Application Server (4), JBoss BPMS (4), JBoss BPM Suite (8), JBoss BRMS (4), JBoss Core Services httpd (2), JBoss Data Grid (3), JBoss Data Virtualization (3), JBoss EAP (11), JBoss Enterprise (10), JBoss Enterprise Application Platform (65), JBoss Enterprise Application Platform Expansion Pack (1), JBoss Enterprise BRMS Platform (3), JBoss Enterprise Portal Platform (11), JBoss Enterprise SOA Platform (2), JBoss Fuse (5), JBoss Operations Network (13), JBoss Portal (5), JBoss Remoting (2), JBossWeb (1), JBoss Web Framework Kit (4), JBoss Web Server (1), JBoss WildFly Application Server (1), Jboss (1), Jboss Enterprise Soa Platform (1), Jboss Enterprise Web (1), Jboss Fuse Esb Enterprise (1), Jbpm-designer (1), KIE Server (1), KON (2), Kernel (1), KeyCloak (4), Keycloak (2), Kie Workbench (1), Linux (83), Linux Advanced Workstation (1), Linux Enterprise (1), Luci (1), ManageIQ EVM (1), ManageIQ Enterprise Virtualization Manager (1), Middleware Container (1), Migration Toolkit for Containers (1), Mobile Application Platform (1), Multicluster Engine for Kubernetes (1), NetworkManager (1), Network Satelite Server (1), Network Satellite (11), Network Satellite Server (6), Nfs Utils (1), OpenShift (21), OpenShift API Management (1), OpenShift API for Data Protection (1), OpenShift Assisted Installer (1), OpenShift Container Platform (6), OpenShift Container Platform 3 (1), OpenShift Container Platform Assisted Installer (1), OpenShift Data Science (2), OpenShift Dev Spaces (1), OpenShift Developer Tools and Services (1), OpenShift Enterprise (14), OpenShift Origin (5), OpenShift Serverless (1), OpenShift Service Mesh (1), OpenShift Source-to-Image Builder Image (1), OpenShift Virtualization (1), OpenStack (16), OpenStack Platform (6), OpenStack Platform Director (2), Openshift (2), Openshift Container Storage (1), Openshift Sandboxed Containers (1), Openshift node-utils (1), Openstack (4), Openstack Enterprise (1), Openstack Folsom (2), PXE Server (1), PackStack (1), PolicyKit (1), Process Automation (2), Process Automation Manager (1), Quarkus (3), Quay (8), QuickStart Cloud Installer (4), RESTEasy (3), RHN (1), RPM (1), RPM Package Manager (8), Red Hat Certificate System (2), Remoting for SOA Platform (1), RichFaces (1), SDL (1), Satellite (25), Single Sign-On (7), Spacewalk (9), Storage Console (1), Storage Server (2), Stronghold (2), Subscription Asset Manager (2), TUX HTTP Server (1), Uberfire (1), Undertow (2), Update Infrastructure (1), VDI (1), Virtual Desktop Service Manager (1), WildFly (11), Wildfly Elytron (1), XML Language Server (1), XML Language Support (1), adminutil (1), cman (1), containers-image (1), dtach (1), enterprise linux (1), gfs2-utils (1), hawtjni (1), insights-client (1), jboss-client (1), jboss-remoting (1), katello-headpin (1), kdelibs (1), kexec-tools (3), keycloak (1), libvirt (17), livecd-tools (1), mcstrans (1), oVirt (1), open-iscsi (1), openshift (5), openshift-clients (1), openshift-logging (1), openstack (1), openstack-neutron (1), openstack-octavia (1), policycoreutils (2), ppp (1), python-eventlet (1), redhat-certification (5), redhat-sso-7 (1), rhevm-dwh (1), rhevm-reports (3), rhncfg (1), rpcbind (1), sos (2), spacewalk-java (2), spice-activex (1), spice-gtk (1), spice-xpi (4), subscription-manager (1), sysreport (1), system-config-firewall (1), system-config-printer (1), up2date (1), yum-rhn-plugin (1)

Link to Vendor Website: https://www.redhat.com/

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
09/05/20247.97.9Red Hat Migration Toolkit for Containers Registry Remote Code ExecutionOperating SystemNot DefinedNot Defined0.000430.69CVE-2024-3727
08/05/20247.57.5Red Hat OpenStack Platform etcd Package förnekande av tjänstenCloud SoftwareNot DefinedNot Defined0.000430.00CVE-2024-4438
08/05/20247.57.5Red Hat OpenStack Platform etcd Package förnekande av tjänstenCloud SoftwareNot DefinedNot Defined0.000430.00CVE-2024-4437
08/05/20247.57.5Red Hat OpenStack Platform etcd Package förnekande av tjänstenCloud SoftwareNot DefinedNot Defined0.000430.10CVE-2024-4436
02/05/20244.34.3Red Hat WildFly EAP Management Interface förnekande av tjänstenApplication Server SoftwareNot DefinedNot Defined0.000430.04CVE-2024-4029
01/05/20243.53.5Red Hat OpenShift cluster-image-registry-operator informationsgivningVirtualization SoftwareNot DefinedNot Defined0.000430.04CVE-2024-4369
25/04/20245.45.4Red Hat Keycloak dbProperties informationsgivningApplication Server SoftwareNot DefinedNot Defined0.000450.05CVE-2024-1102
25/04/20246.46.4Red Hat OpenShift Container Platform förnekande av tjänstenVirtualization SoftwareNot DefinedNot Defined0.000450.05CVE-2023-6596
25/04/20246.06.0Red Hat Advanced Cluster Management for Kubernetes informationsgivningVirtualization SoftwareNot DefinedNot Defined0.000450.00CVE-2024-1139
10/04/20247.37.3Red Hat Enterprise Application Platform OIDC App svag autentiseringOkändNot DefinedNot Defined0.000430.34CVE-2023-6236
09/04/20247.37.3Red Hat JBoss Enterprise Application Platform HTTP Request privilegier eskaleringApplication Server SoftwareNot DefinedNot Defined0.000430.04CVE-2024-1233
04/04/20243.53.5Red Hat Undertow FormAuthenticationMechanism förnekande av tjänstenOkändNot DefinedNot Defined0.000000.07CVE-2023-1973
15/03/20245.95.9Red Hat OpenStack openstack-designate Local Privilege EscalationCloud SoftwareNot DefinedNot Defined0.000430.03CVE-2023-6725
07/03/20247.27.2Red Hat OpenShift kubevirt-csi Privilege EscalationVirtualization SoftwareNot DefinedNot Defined0.000450.00CVE-2024-1725
29/02/20243.53.4Red Hat Ansible Automation Platform Websocket informationsgivningAutomation SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1657
20/02/20246.46.3Red Hat Undertow HTTP Upgrade WriteTimeoutStreamSinkConduit förnekande av tjänstenOkändNot DefinedOfficial Fix0.000450.04CVE-2024-1635
14/02/20244.34.3Red Hat OpenShift Websocket förfalskning på begäran över webbplatsenVirtualization SoftwareNot DefinedNot Defined0.000430.04CVE-2024-1342
25/01/20244.64.6Red Hat OpenStack Access Rule förnekande av tjänstenCloud SoftwareNot DefinedNot Defined0.000000.04CVE-2023-6110
24/01/20244.84.7Red Hat Dependency Analytics Plugin privilegier eskaleringJenkins PluginNot DefinedOfficial Fix0.000440.02CVE-2024-23905
24/01/20248.08.0Red Hat Quarkus JSON Payload privilegier eskaleringOkändNot DefinedNot Defined0.000680.04CVE-2023-6267
24/01/20245.55.5Red Hat Quarkus RestEasy JAX-RS Endpoint privilegier eskaleringOkändNot DefinedNot Defined0.000450.04CVE-2023-5675
23/01/20246.96.9Red Hat oVirt GenericApiGWTService CreateUserSessionCommand svag autentiseringVirtualization SoftwareNot DefinedOfficial Fix0.000770.00CVE-2024-0822
19/01/20244.24.2Red Hat Ansible Log informationsgivningOkändNot DefinedOfficial Fix0.000450.05CVE-2024-0690
19/12/20235.55.5Red Hat Developer Hub Catalog Import informationsgivningOkändNot DefinedOfficial Fix0.000490.00CVE-2023-6944
18/12/20234.74.7Red Hat Keycloak JARM Response RedirectOkändNot DefinedNot Defined0.001170.00CVE-2023-6927
15/12/20237.16.9Red Hat keycloak/Single Sign-On/Middleware Container/ Admin User Interface förnekande av tjänstenMiddlewareNot DefinedOfficial Fix0.000920.00CVE-2023-6563
09/12/20237.47.3Red Hat Quarkus Websocket Remote Code ExecutionOkändNot DefinedOfficial Fix0.000670.02CVE-2023-6394
03/11/20235.45.4Red Hat 3scale Admin Portal API Management informationsgivningOkändNot DefinedNot Defined0.000430.07CVE-2023-4910
02/11/20233.53.5Red Hat Ansible Template privilegier eskaleringOkändNot DefinedNot Defined0.000420.00CVE-2023-5764
01/11/20236.06.0Red Hat python-eventlet förnekande av tjänstenProgramming Language SoftwareNot DefinedOfficial Fix0.000540.02CVE-2023-5625
06/10/20233.53.4Red Hat JBoss Enterprise Application Platform Class privilegier eskaleringApplication Server SoftwareNot DefinedOfficial Fix0.003620.00CVE-2023-3171
06/10/20232.42.4Red Hat WildFly Management User RBAC privilegier eskaleringApplication Server SoftwareNot DefinedNot Defined0.000750.00CVE-2023-4061
05/10/20234.74.7Red Hat OpenShift API privilegier eskaleringVirtualization SoftwareNot DefinedNot Defined0.000480.00CVE-2022-3248
05/10/20235.55.5Red Hat OpenShift Node Role Label Privilege EscalationVirtualization SoftwareNot DefinedNot Defined0.001330.00CVE-2023-5408
27/09/20233.53.5Red Hat Infinispan förnekande av tjänstenOkändNot DefinedNot Defined0.000620.04CVE-2023-5236
26/09/20235.55.5Red Hat Ansible Automation Hub Tarball kataloggenomgångAutomation SoftwareNot DefinedNot Defined0.000560.05CVE-2023-5189
24/09/20234.34.2Red Hat OpenShift Service Mesh Error Response privilegier eskaleringVirtualization SoftwareNot DefinedOfficial Fix0.000520.00CVE-2022-3962
23/09/20237.87.7Red Hat Single Sign-On privilegier eskaleringOkändNot DefinedOfficial Fix0.000680.00CVE-2022-4039
22/09/20233.73.7Red Hat Ansible ansible-galaxy okänd sårbarhetOkändNot DefinedNot Defined0.000670.09CVE-2023-5115
17/09/20233.93.8Red Hat OpenShift OAuth Endpoint cross site scriptingVirtualization SoftwareProof-of-ConceptNot Defined0.000730.05CVE-2022-4145
16/09/20238.68.5Red Hat OpenShift Data Science Kubernetes Service privilegier eskaleringVirtualization SoftwareNot DefinedOfficial Fix0.000680.04CVE-2023-0923
16/09/20234.74.7Red Hat OpenStack messages informationsgivningCloud SoftwareNot DefinedNot Defined0.000870.05CVE-2022-3261
15/09/20235.04.9Red Hat OpenShift Container Platform cri-o privilegier eskaleringVirtualization SoftwareNot DefinedOfficial Fix0.000450.00CVE-2022-3466
15/09/20235.85.8Red Hat Quay förfalskning på begäran över webbplatsenOkändNot DefinedNot Defined0.000480.00CVE-2023-4959
14/09/20234.34.3Red Hat Advanced Cluster Security Stackrox privilegier eskaleringOkändNot DefinedNot Defined0.000520.00CVE-2023-4958
14/09/20237.47.4Red Hat Enterprise Linux Incomplete Fix CVE-2021-3750 minneskorruptionOperating SystemNot DefinedNot Defined0.000420.03CVE-2023-2680
29/08/20235.55.5Red Hat Ansible sql injektionOkändNot DefinedNot Defined0.000000.00CVE-2023-4567
23/08/20233.53.4Red Hat AMQ Broker Operator svag krypteringOkändNot DefinedOfficial Fix0.000450.03CVE-2023-4066
23/08/20233.33.2Red Hat AMQ Broker Operator informationsgivningOkändNot DefinedOfficial Fix0.000420.00CVE-2023-4065
23/08/20236.56.5Red Hat subscription-manager D-Bus Interface privilegier eskaleringOkändNot DefinedNot Defined0.000420.04CVE-2023-3899

957 fler poster visas inte

Might our Artificial Intelligence support you?

Check our Alexa App!