Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Red Hat Component: Advanced Cluster Security Clear all filters
TI-2025-04664 CVE-2025-5198 · GHSA-fcj3-9fc8-9489

Stackrox: xss in stackrox

Priority LOW 24

A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00288 Published 2025-05-27 Partial fix · 4.4.8, 4.5.6 +1 CWE-79
TI-2024-00368 CVE-2024-0406 · GHSA-rhh4-rh7c-7r5v

Mholt/archiver: path traversal vulnerability

Priority LOW 36

A flaw was discovered in the mholt/archiver package.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00928 Published 2024-04-06 Partial fix · v4.0.0, v4.18.0-202503051333.p0.g22b273d.assembly.stream.el9 CWE-22
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2023-04563 CVE-2023-4958 · GHSA-2xrv-7wfr-fxj6

Stackrox: missing http security headers allows for clickjacking in web ui

Priority LOW 28

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00629 Published 2023-12-12 Partial fix · 4.2.0-6 CWE-1021