Security
فارسی
All products

Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Kibana: Cross-site scripting issue (ESA-2022-01)CVE-2022-23707 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: cross-site-scripting (XSS) issue (ESA-2022-04)CVE-2022-23710 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: missing authorization issue (ESA-2022-03)CVE-2022-23709 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: Kibana cross-site-scripting (XSS) issue (ESA-2022-08)CVE-2022-23713 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Red Hat Medium No fix reported
kibana: Kibana open redirect issue (ESA-2023-03)CVE-2022-38779 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Red Hat Medium No fix reported
kibana: read-only alerting users using the run_soon API making the alerting rule run continuouslyCVE-2024-37279 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Red Hat Medium No fix reported