Product by Red Hat
RedHat OpenShift Service Mesh
24 known vulnerabilities in RedHat OpenShift Service Mesh (Red Hat), 1 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| High | CVE-2019-9515 | F5 Big-ip Local Traffic Manager: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9514 | F5 Big-ip Local Traffic Manager: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9513 | Node: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2020-27846 | Crewjam/saml: Misinterpretation of Input | 9.8 | |
| High | CVE-2019-9511 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9516 | Apache Traffic Server: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9517 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9518 | Node: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2026-29063 | Immutable-js: Prototype Pollution | 9.8 | |
| High | CVE-2020-1764 | Red Hat Kiali: Use of Hard-coded Cryptographic Key | 8.6 | |
| High | CVE-2019-9900 | Envoy Proxy Envoy: security vulnerability | 6.5 | |
| High | CVE-2020-8595 | Istio Istio: Authentication Bypass | 7.3 | |
| High | CVE-2020-8659 | Envoy Proxy Envoy: security vulnerability | 7.5 | |
| High | CVE-2020-8661 | Envoy Proxy Envoy: security vulnerability | 7.5 | |
| High | CVE-2026-47774 | Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification | 7.5 | |
| Critical | CVE-2021-3586 | Servicemesh-operator: Initialization of a Resource with an Insecure Default | 9.8 | |
| High | CVE-2026-44495 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge | 7.0 | |
| High | CVE-2021-3495 | Kiali/kiali-operator: Improper Preservation of Permissions | 8.8 | |
| Medium | CVE-2019-25014 | Istio Istio: NULL Pointer Dereference | 6.5 | |
| High | CVE-2020-1762 | Kiali: Insufficient Session Expiration | 7.0 | |
| High | CVE-2025-0752 | Red Hat OpenShift Service Mesh 2: HTTP Request/Response Smuggling | 7.1 | |
| Medium | CVE-2022-3962 | Kiali: error message spoofing in kiali ui | 4.3 | |
| High | CVE-2020-1704 | Red Hat Openshift-service-mesh/kiali-rhel7-operator: Incorrect Privilege Assignment | 7.0 |