AC
Product
Advanced Cluster Management For Kubernetes
16
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 6Low 1
Watch
Add Advanced Cluster Management For Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4740 | 8.2 | Apr 7 | Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation Affected: All versions, or not specified |
| CVE-2023-3027 | 7.8 | Jun 5 | The grc-policy-propagator allows security escalation within the cluster Affected: 2.5; 2.6; 2.7 |
| CVE-2022-3841 | 7.8 | Jan 13 | RHACM: unauthenticated SSRF in console API endpoint Affected: 2.0 |
| CVE-2026-71845 | 7.7 | Aug 11 | Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault() Affected: 2.0 |
| CVE-2026-44495 | 7.7 | Jun 11 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge Affected: before 2.13.9 |
| CVE-2025-14874 | 7.5 | Dec 18 | Nodemailer: nodemailer: denial of service via crafted email address header Affected: 2.0 |
| CVE-2022-3248 | 7.5 | Oct 5 | A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions Affected: 2.0 |
| CVE-2022-27191 | 7.5 | Mar 18 | The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey Affected: 2.0 |
| CVE-2026-71474 | 7.1 | Aug 11 | Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response Affected: 2.0 |
Showing 9