Known vulnerabilities in OpenShift Service Mesh 2.0.0

Version: 2.0.0
Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OpenShift Service Mesh version 2.0.0 OpenShift Service Mesh 2.0.0 is affected by 6 vulnerabilities: 1 high, 5 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
2.0.11, 2.1.5 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64155 - NULL Pointer Dereference
CVE-2022-29224
CWE-476 Medium
No
No
2.0.10, 2.1.3 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more
#VU64154 - Resource exhaustion
CVE-2022-29225
CWE-400 Medium
No
No
2.0.10, 2.1.3 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
2.0.11, 2.1.3, 2.1.5 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU54032 - Security Features
CVE-2021-3586
CWE-254 Medium
No
No
- 10.06.2021 SB2021061017
#VU53523 - Improper Authorization
CVE-2021-31921
CWE-285 High
No
No
2.0.5 25.05.2021 SB2021052510
SB2021052511
SB2021052512