Red Hat Red Hat Advanced Cluster Security 4
10 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114236 | | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | LOW 3.3 | 0.1 % | ||
| CVE-2026-19519 | | Claircore: claircore: denial of service via unchecked type assertion in rpm header parser | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-19278 | | Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-10079 | | Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection | HIGH 8.5 | 0.2 % | ||
| CVE-2026-16254 | | Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-9165 | | Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service | HIGH 7.7 | 0.5 % | ||
| CVE-2025-11065 | | Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-5198 | | Stackrox: xss in stackrox | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-11831 | | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | MEDIUM 5.4 | 1.1 % | ||
| CVE-2024-0406 | | Mholt/archiver: path traversal vulnerability | HIGH 7.8 | 0.9 % |