KU
Product
Kubernetes
60
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 5High 15Medium 35Low 5
Watch
Add Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1002105 | 9.8 | Dec 5 | In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially… Affected: 1.0.0 through 1.9.11; 1.10.0 through 1.10.10; 1.11.0 through 1.11.4; 1.12.0 through 1.12.2; 1.9.12 |
| CVE-2018-1002101 | 9.8 | Dec 5 | In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to… Affected: 1.9.0 through 1.9.9; 1.10.0 through 1.10.5; 1.11.0 through 1.11.1 |
| CVE-2017-1000056 | 9.8 | Jul 17 | Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing… Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4 |
| CVE-2016-1906 | 9.8 | Feb 3 | Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed Affected: All versions, or not specified |
| CVE-2017-1002101 | 9.6 | Mar 13 | In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including… Affected: 1.3.0 through 1.3.10; 1.4.0 through 1.4.12; 1.5.0 through 1.5.8; 1.6.0 through 1.6.13; 1.7.0 before 1.7.14; 1.8.0 before 1.8.9; +1 more |
Showing 5