How many k8s.io k8s.io/kube-state-metrics CVEs are in CISA KEV?

None of k8s.io k8s.io/kube-state-metrics's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for k8s.io k8s.io/kube-state-metrics vulnerabilities?

Yes — 1 of k8s.io k8s.io/kube-state-metrics's CVEs have a known public exploit.

Which versions of k8s.io k8s.io/kube-state-metrics are affected?

2 distinct k8s.io k8s.io/kube-state-metrics versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in k8s.io k8s.io/kube-state-metrics CVEs?

k8s.io k8s.io/kube-state-metrics's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

What is the average severity of k8s.io k8s.io/kube-state-metrics CVEs?

The average CVSS base score across k8s.io k8s.io/kube-state-metrics's scored CVEs is 6.5.

k8s.io k8s.io/kube-state-metrics Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: k8s.io k8s.io/kube-state-metrics vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

k8s.io k8s.io/kube-state-metrics Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

k8s.io k8s.io/kube-state-metrics has 1 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of k8s.io k8s.io/kube-state-metrics's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of k8s.io k8s.io/kube-state-metrics's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of k8s.io k8s.io/kube-state-metrics's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every k8s.io k8s.io/kube-state-metrics version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.7.0 <= v < 1.7.21 CVE

Fixed in

1.7.21 CVE

Find a version

1 CVE

Sort

kube-state-metrics may expose secret content in metrics
CVE-2019-10223
Public exploit
Patch
CWE-200
Medium · CVSS 6.5
EPSS 1.8% (78th pct)2019-11-05

Common weakness types

The CWE weakness categories most often found in k8s.io k8s.io/kube-state-metrics CVEs. Follow any weakness for its full explanation.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVE

Other k8s.io products

Browse vulnerabilities for other products by k8s.io.

k8s.io/kubernetes50 CVEs k8s.io/ingress-nginx17 CVEs k8s.io/client-go3 CVEs k8s.io/apiextensions-apiserver1 CVEs k8s.io/apimachinery1 CVEs k8s.io/apiserver1 CVEs k8s.io/kops1 CVEs

Frequently asked questions

Common questions about k8s.io k8s.io/kube-state-metrics vulnerabilities.

How many CVEs does k8s.io k8s.io/kube-state-metrics have?: k8s.io k8s.io/kube-state-metrics has 1 published CVE records since 2019.
How many k8s.io k8s.io/kube-state-metrics CVEs are in CISA KEV?: None of k8s.io k8s.io/kube-state-metrics's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for k8s.io k8s.io/kube-state-metrics vulnerabilities?: Yes — 1 of k8s.io k8s.io/kube-state-metrics's CVEs have a known public exploit.
Which versions of k8s.io k8s.io/kube-state-metrics are affected?: 2 distinct k8s.io k8s.io/kube-state-metrics versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in k8s.io k8s.io/kube-state-metrics CVEs?: k8s.io k8s.io/kube-state-metrics's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
What is the average severity of k8s.io k8s.io/kube-state-metrics CVEs?: The average CVSS base score across k8s.io k8s.io/kube-state-metrics's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track k8s.io k8s.io/kube-state-metrics vulnerabilities

Get an alert for each new k8s.io k8s.io/kube-state-metrics CVE, with AI-written analysis and remediation steps.

Create an account See pricing