Red Hat Advanced Cluster Security 3 vulnerabilities

2 CVEs affecting Red Hat Advanced Cluster Security 3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-4975, published 2025-01-27.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-3727, published 2024-05-14. High severity, CVSS 8.3. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion,…
• CVE-2022-4975, published 2025-01-27. High severity, CVSS 8.9. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end…