redhat openshift service mesh

Name: redhat openshift service mesh
Brand: redhat

productUS

cpe:2.3:a:redhat:openshift_service_mesh:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical16high3medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	= 2.0
CVE-2019-9511US	high7.5	59.5% (99th)	Exploit	no fix	2019-08-13	= 1.0
CVE-2020-1764US	high8.6OT high	3.47% (89th)	Exploit	no fix	2020-03-26	= 1.0
CVE-2019-9515US	high7.5	87.3% (100th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9514US	high7.5	82.8% (100th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9513US	high7.5	81.6% (100th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9516US	medium6.5	56.3% (99th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9517US	high7.5	27.9% (98th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9518US	high7.5	25.4% (98th)	—	no fix	2019-08-13	= 1.0
CVE-2020-27846US	critical9.8	4.93% (92nd)	—	no fix	2020-12-21	= 2.0
CVE-2019-9900US	high8.3	3.73% (90th)	—	no fix	2019-04-25	—
CVE-2020-8595US	high7.3	2.61% (85th)	—	no fix	2020-02-12	= 1.0
CVE-2020-8659US	high7.5	1.89% (79th)	—	no fix	2020-03-04	= 1.0
CVE-2020-8661US	high7.5	1.87% (79th)	—	no fix	2020-03-04	= 1.0.9
CVE-2019-25014US	medium6.5	1.34% (71st)	—	no fix	2021-01-29	= 1.0
CVE-2020-1762US	high8.6	1.15% (67th)	—	no fix	2020-04-27	= 1.0
CVE-2021-3586US	critical9.8OT elevated	1.03% (64th)	—	no fix	2022-08-22	= 2.0
CVE-2021-3495US	high8.8	0.97% (62nd)	—	no fix	2021-06-01	2 versions
CVE-2026-47774US	—	0.97% (62nd)	—	3.3.4	2026-06-17	5 versions
CVE-2026-44495US	high7.7	0.85% (58th)	—	no fix	2026-06-11	—
CVE-2022-3962US	medium4.3	0.74% (54th)	—	no fix	2023-09-23	= 2.3.1
CVE-2025-0752US	—	0.41% (35th)	—	no fix	2025-01-28	2 versions
CVE-2020-1704US	high7.8	0.27% (20th)	—	1.0.8	2020-02-17	< 1.0.8

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption10 CVEs
CWE-770Allocation of Resources Without Limits or Throttling8 CVEs
CWE-287Improper Authentication2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-115Misinterpretation of Input1 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.