Red Hat OpenShift Network Observability 1.11.2

productDE

cpe:/a:redhat:openshift:network_observability_1.11.2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical10high5medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-30951US	high7.5	0.45% (39th)	Exploit	no fix	2026-03-10	—
CVE-2026-25639US	—	2.80% (86th)	—	no fix	2026-02-09	—
CVE-2026-1615US	—	1.17% (67th)	—	no fix	2026-02-09	—
CVE-2026-42033US	—	0.87% (59th)	—	no fix	2026-04-24	—
CVE-2026-30922US	—	0.82% (57th)	—	no fix	2026-03-18	—
CVE-2026-25679US	—	0.77% (56th)	—	no fix	2026-03-06	—
CVE-2026-42039US	high7.5	0.77% (55th)	—	no fix	2026-04-24	—
CVE-2026-42043US	critical10.0	0.71% (53rd)	—	no fix	2026-04-24	—
CVE-2026-27140US	high8.8OT elevated	0.66% (51st)	—	no fix	2026-04-08	—
CVE-2026-42041US	medium6.5	0.66% (51st)	—	no fix	2026-04-24	—
CVE-2026-29074US	—	0.64% (50th)	—	no fix	2026-03-06	—
CVE-2026-27137US	—	0.63% (50th)	—	no fix	2026-03-06	—
CVE-2026-32283US	high7.5	0.62% (50th)	—	no fix	2026-04-08	—
CVE-2026-32280US	—	0.61% (49th)	—	no fix	2026-04-08	—
CVE-2026-42044US	critical9.1	0.61% (49th)	—	no fix	2026-04-24	—
CVE-2025-69223US	—	0.58% (48th)	—	no fix	2026-01-05	—
CVE-2025-69873US	—	0.55% (46th)	—	no fix	2026-02-11	—
CVE-2026-27143US	critical9.8	0.54% (45th)	—	no fix	2026-04-08	—
CVE-2026-28802US	critical9.8	0.50% (43rd)	—	no fix	2026-03-06	—
CVE-2026-40895US	high7.5	0.49% (42nd)	—	no fix	2026-04-21	—
CVE-2026-30827US	—	0.48% (41st)	—	no fix	2026-03-07	—
CVE-2026-25990US	high7.5	0.41% (35th)	—	no fix	2026-02-11	—
CVE-2026-42035US	—	0.40% (34th)	—	no fix	2026-04-24	—
CVE-2026-26007US	medium6.5OT elevated	0.39% (33rd)	—	no fix	2026-02-10	—
CVE-2026-27138US	—	0.36% (30th)	—	no fix	2026-03-06	—
CVE-2026-32281US	high7.5	0.36% (29th)	—	no fix	2026-04-08	—
CVE-2026-27142US	—	0.34% (27th)	—	no fix	2026-03-06	—
CVE-2026-33810US	high8.2	0.34% (27th)	—	no fix	2026-04-08	—
CVE-2026-32282US	medium6.4	0.29% (22nd)	—	no fix	2026-04-08	—
CVE-2026-32289US	medium6.1	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-32288US	medium5.5	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-27144US	high7.1	0.26% (18th)	—	no fix	2026-04-08	—
CVE-2026-28498US	high7.5	0.24% (14th)	—	no fix	2026-03-16	—
CVE-2026-27139US	—	0.21% (11th)	—	no fix	2026-03-06	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')5 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes3 CVEs
CWE-354Improper Validation of Integrity Check Value2 CVEs
CWE-674Uncontrolled Recursion2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan