Redhat Advanced Cluster Security — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Advanced Cluster Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-1902 — CVSS 8.8 (high): A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2023-4958 — CVSS 6.1 (medium): In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to…
• CVE-2024-0406 — CVSS 6.1 (medium): A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when…
• CVE-2023-48795 — CVSS 5.9 (medium): The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to…
• CVE-2025-5198 — CVSS 5.0 (medium): A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of…