What is the kubernetes CNA?
kubernetes is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 97 CVE records since 2017.
How many CVEs has kubernetes published?
kubernetes has published 97 CVE records, including 27 in the last two years.
What is kubernetes's CVE data quality grade?
RadicalNotion.AI grades kubernetes's CVE data quality as A, with an overall completeness score of 97.7%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (97.9%), and CWE (92.8%) information.
What products does kubernetes publish CVEs for?
kubernetes most frequently publishes CVEs for Kubernetes, k8s.io/kubernetes, ingress-nginx, nginx-ingress-controller, k8s.io/ingress-nginx.
Which vendors does kubernetes cover?
kubernetes publishes CVEs across 2 distinct vendors, most often Kubernetes, k8s.io, Bitnami, redhat, fedoraproject.
Is kubernetes actively publishing CVEs?
kubernetes is currently active, based on 27 CVEs in the last two years.
What is the average severity of kubernetes's CVEs?
The average CVSS base score across kubernetes's scored CVEs is 6.3.
How many critical CVEs has kubernetes published?
kubernetes has published 4 critical-severity CVEs and 31 high-severity CVEs.
Are any of kubernetes's CVEs in CISA's Known Exploited Vulnerabilities catalog?
No. None of kubernetes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in kubernetes's CVEs?
kubernetes's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-532 (Insertion of Sensitive Information into Log File), CWE-798 (Use of Hard-coded Credentials), CWE-61 (UNIX Symbolic Link (Symlink) Following).
How does kubernetes rank among CNAs?
By total CVE volume, kubernetes ranks #126 of 370 CNAs, and it reports more complete CVE records than 47% of all CNAs.
