Red Hat Advanced Cluster Management for Kubernetes 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Advanced Cluster Management For Kubernetes (4c00ee3f-497c-5717-83d0-7e24eefd9fa8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14874 |
vulnerable | 2026-06-08 07:06:35.285204 |
Nodemailer: nodemailer: denial of service via crafted email address header
HIGH (7.5)
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
Published: 2025-12-18T08:40:31.916Z
Updated: 2026-01-08T02:59:52.145Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44487 |
vulnerable | 2026-06-08 06:12:41.208366 |
Details available
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published: 2023-10-10T00:00:00.000Z
Updated: 2026-07-14T12:03:17.389Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3841 |
vulnerable | 2026-06-08 05:48:22.442267 |
Details available
RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.
Published: 2023-01-11T20:38:19.315Z
Updated: 2025-04-09T13:39:27.405Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3248 |
vulnerable | 2026-06-08 05:47:19.791903 |
Openshift api admission checks does not enforce "custom-host" permissions
MEDIUM (4.4)
A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.
Published: 2023-10-05T13:28:27.973Z
Updated: 2024-08-29T20:01:55.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2238 |
vulnerable | 2026-06-08 05:43:35.094012 |
Details available
A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw allows an attacker to craft specific strings containing special characters that lead to crashing the pod and affects system availability while restarting.
Published: 2022-09-01T19:56:03.000Z
Updated: 2024-08-03T00:32:09.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27191 |
vulnerable | 2026-06-08 05:41:54.969496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25655 |
vulnerable | 2026-06-08 05:22:37.100011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.