kubeflow records

4 published records for vendor kubeflow.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2024-5552No exploit	ReDoS in kubeflow/kubeflowkubeflow · kubeflow · CWE-1333 Pre-auth Auth bypass Denial of service	High7.5	—	0.6%	Jun 6, 2024
28Monitor	CVE-2024-9526No exploit	Stored XSS in Kubeflow Pipeline Viewkubeflow · pipelines · CWE-79 XSS	High7.1	—	0.2%	Nov 18, 2024
26Monitor	CVE-2023-6570No exploit	Server-Side Request Forgery (SSRF) in kubeflow/kubeflowkubeflow · kubeflow · CWE-918 SSRF	Medium6.5	—	0.6%	Dec 14, 2023
24Monitor	CVE-2023-6571No exploit	Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflowkubeflow · kubeflow · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 14, 2023

CVE-2024-5552
30Monitor
ReDoS in kubeflow/kubeflow
HighCVSS 7.5No exploitEPSS 0%
kubeflow · kubeflowJun 6, 2024
CVE-2024-9526
28Monitor
Stored XSS in Kubeflow Pipeline View
HighCVSS 7.1No exploitEPSS 0%
- XSS
kubeflow · pipelinesNov 18, 2024
CVE-2023-6570
26Monitor
Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
MediumCVSS 6.5No exploitEPSS 0%
- SSRF
kubeflow · kubeflowDec 14, 2023
CVE-2023-6571
24Monitor
Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
kubeflow · kubeflowDec 14, 2023