Vulnerabilities

TI-2024-32618 CVE-2024-48921 · GHSA-qjvc-p88j-j9rm

Kyverno's PolicyException objects can be created in any namespace by default

HIGH 77

Kyverno is a policy engine designed for Kubernetes.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00573 Published 2024-10-29 Fixed in 1.13.0 CWE-285

TI-2023-22904 CVE-2023-42813

LOW 28

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00657 Published 2023-11-13 No fix listed CWE-400

TI-2023-22905 CVE-2023-42814

LOW 25

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00671 Published 2023-11-13 No fix listed CWE-835

TI-2023-22906 CVE-2023-42815

LOW 25

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00671 Published 2023-11-13 No fix listed CWE-835

TI-2023-22907 CVE-2023-42816

LOW 28

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00457 Published 2023-11-13 No fix listed CWE-345

TI-2023-16937 CVE-2023-34091 · GHSA-hq4m-4948-64cc

LOW 29

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00497 Published 2023-06-01 Fixed in 1.10.0 CWE-285

TI-2023-16368 CVE-2023-33191 · GHSA-33hq-f2mf-jm3c

LOW 39

Kyverno is a policy engine designed for Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00485 Published 2023-05-30 Fixed in 1.9.4 CWE-284