Linuxfoundation Kubeedge vulnerabilities

8 CVEs affecting Linuxfoundation Kubeedge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31080, published 2022-07-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-31073, published 2022-07-11. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, the ServiceBus server on the…
CVE-2022-31075, published 2022-07-11. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, EdgeCore may be susceptible…
CVE-2022-31074, published 2022-07-11. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, several endpoints in the…
CVE-2022-31077, published 2022-06-27. Medium severity, CVSS 5.7. EPSS: 0.8% chance of exploitation in the next 30 days. KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from…
CVE-2022-31080, published 2022-07-11. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, a large response received by…
CVE-2022-31079, published 2022-07-11. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, the Cloud Stream server and…
CVE-2022-31078, published 2022-07-11. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, the CloudCore Router does…
CVE-2022-31076, published 2022-06-27. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore…