Redhat Openshift Developer Tools And Services — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Openshift Developer Tools And Services, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-1485 — CVSS 8.0 (high): A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2023-2253 — CVSS 6.5 (medium): A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of…
• CVE-2023-48795 — CVSS 5.9 (medium): The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to…