Vendors / Cncf Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Cncf records in CISA KEV No Cncf vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Crossplane is a framework for building cloud native control planes without needing to write code.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00836 · Published 2023-07-27 · Fixed in 1.11.5, 1.12.3 CWE-20
Priority LOW 39
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03159 · Published 2019-04-02 · Partial fix CWE-670
Priority LOW 36
In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 cer…
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00558 · Published 2021-03-05 · Fixed in 0.8.5, 0.9.4 +3 CWE-295
Priority LOW 31
In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary…
CVSS 3.1 MEDIUM 6.8· Network · Low privileges · No interaction · EPSS 0.00722 · Published 2021-03-05 · No fix listed CWE-863
Priority LOW 17
Crossplane is a framework for building cloud native control planes without needing to write code.
CVSS 3.1 LOW 3.4· Network · High privileges · User interaction · EPSS 0.00621 · Published 2023-07-27 · Fixed in 1.11.5, 1.12.3 CWE-400
Open these records in search → All records by CVSS severity
1 2 1 1 0
THREATIST.IORead the docs