Red Hat Storage For Public Cloud vulnerabilities

4 CVEs affecting Red Hat Storage For Public Cloud, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4406, published 2012-10-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability, published 2012-05-11. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 100% chance of exploitation in the next 30 days. sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which…
CVE-2012-0037, published 2012-06-17. Medium severity, CVSS 6.5. EPSS: 13.7% chance of exploitation in the next 30 days. Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read…
CVE-2012-4406, published 2012-10-22. Critical severity, CVSS 9.8. EPSS: 6.6% chance of exploitation in the next 30 days. OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute…
CVE-2011-3045, published 2012-03-22. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a…