AC
Product
Advanced Cluster Management For Kubernetes
16
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 6Low 1
Watch
Add Advanced Cluster Management For Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-71475 | 6.8 | Aug 11 | Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path Affected: 2.0 |
| CVE-2025-57851 | 6.7 | Apr 8 | Mce: privilege escalation via excessive /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-71846 | 6.5 | Aug 12 | Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege Affected: 2.0 |
| CVE-2022-2238 | 6.5 | Sep 1 | A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend Affected: 2.0 |
| CVE-2020-25655 | 6.5 | Nov 9 | An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions Affected: 2.0 |
| CVE-2025-6017 | 5.5 | Jul 2 | A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4 Affected: 2.10 before 2.10.7; 2.11 before 2.11.4; 2.12 before 2.12.4 |
Showing 6