Vulnerabilities

TI-2022-13124 CVE-2022-31080 · GHSA-6wvc-6pww-qr4r

KubeEdge Websocket Client in package Viaduct: DoS from large response message

LOW 30

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00723 Published 2022-07-11 Fixed in 1.10.2, 1.9.4 +1 CWE-400

TI-2022-13123 CVE-2022-31079 · GHSA-wrcr-x4qj-j543

LOW 30

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00703 Published 2022-07-11 Fixed in 1.10.2, 1.9.4 +1 CWE-400

TI-2022-13122 CVE-2022-31078 · GHSA-qpx3-9565-5xwm

LOW 30

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00703 Published 2022-07-11 Fixed in 1.9.4, 1.10.2 +1 CWE-400

TI-2022-13119 CVE-2022-31075 · GHSA-x3px-2p95-f6jr

LOW 31

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00999 Published 2022-07-11 Fixed in 1.9.4, 1.10.2 +1 CWE-400

TI-2022-13118 CVE-2022-31074 · GHSA-w52j-3457-q9wr

LOW 30

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00822 Published 2022-07-11 Fixed in 1.9.4, 1.10.2 +1 CWE-400

TI-2022-13117 CVE-2022-31073 · GHSA-vwm6-qc77-v2rh

HIGH 66

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01676 Published 2022-07-11 Fixed in 1.9.4, 1.10.2 +1 CWE-400

TI-2022-13121 CVE-2022-31077 · GHSA-x938-fvfw-7jh5

LOW 27

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00839 Published 2022-06-27 Fixed in 1.9.3, 1.10.1 CWE-476

TI-2022-13120 CVE-2022-31076 · GHSA-8f4f-v9x5-cg6j

MEDIUM 59

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00615 Published 2022-06-27 Fixed in 1.9.3, 1.10.1 CWE-476