Red Hat Advanced Cluster Security 4.0 for Kubernates
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:kubernates:*:*
part: a version: 4.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Advanced Cluster Security (0b3dd699-404e-5d9e-8e4a-dd1d017c80f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | kubernates |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/rohankumardubey/stackrox |
purl2cpe | 2026-06-01 10:12:56.711411 |
pkg:github/stackrox/stackrox |
purl2cpe | 2026-06-01 10:12:56.711413 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5198 |
vulnerable | 2026-06-08 07:35:24.373179 |
Stackrox: xss in stackrox
MEDIUM (5)
A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product.
Published: 2025-05-27T20:51:34.287Z
Updated: 2026-02-27T16:41:01.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4958 |
vulnerable | 2026-06-08 06:16:15.172910 |
Stackrox: missing http security headers allows for clickjacking in web ui
MEDIUM (6.1)
In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.
Published: 2023-12-12T10:02:33.672Z
Updated: 2024-08-02T07:44:53.761Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.