Nirmata

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Nirmata records in CISA KEV

No Nirmata vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kyverno 7 records HIGH

Records

7 records

TI-2024-32618 CVE-2024-48921 · GHSA-qjvc-p88j-j9rm

Kyverno's PolicyException objects can be created in any namespace by default

HIGH 77

Kyverno is a policy engine designed for Kubernetes.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00573 Published 2024-10-29 Fixed in 1.13.0 CWE-285

TI-2023-16368 CVE-2023-33191 · GHSA-33hq-f2mf-jm3c

kyverno seccomp control can be circumvented

LOW 39

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00485 Published 2023-05-30 Fixed in 1.9.4 CWE-284

TI-2023-16937 CVE-2023-34091 · GHSA-hq4m-4948-64cc

Kyverno resource with a deletionTimestamp may allow policy circumvention

LOW 29

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00497 Published 2023-06-01 Fixed in 1.10.0 CWE-285

TI-2023-22907 CVE-2023-42816

Denial of service from malicious signature in kyverno

LOW 28

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00457 Published 2023-11-13 No fix listed CWE-345

TI-2023-22904 CVE-2023-42813

Denial of service from malicious manifest in kyverno

LOW 28

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00657 Published 2023-11-13 No fix listed CWE-400

TI-2023-22906 CVE-2023-42815

Denial of service from malicious image manifest in kyverno

LOW 25

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00671 Published 2023-11-13 No fix listed CWE-835

TI-2023-22905 CVE-2023-42814

Denial of service from malicious image manifest in kyverno

LOW 25

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00671 Published 2023-11-13 No fix listed CWE-835

Open these records in search →