13 matches found
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: gitness, drone-fips, cert-manager-cmctl, helm-mapkubeapis, manifest-tool, argocd-image-updater-fips, opentofu, kube-mgmt, chaos-mesh, oras, cloudbeat, ratify-fips, rancher-helm, cilium-cli, kubescape-server, opentofu-fips, trivy-operator, helm-exporter-fips, kubescap...
GO-2026-5885 vulnerabilities
Vulnerabilities for packages: gitness, drone-fips, cert-manager-cmctl, helm-mapkubeapis, manifest-tool, argocd-image-updater-fips, opentofu, kube-mgmt, chaos-mesh, oras, cloudbeat, ratify-fips, rancher-helm, cilium-cli, kubescape-server, opentofu-fips, trivy-operator, helm-exporter-fips, kubescap...
CVE-2026-72526
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
EUVD-2026-57057
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
CVE-2026-72526 Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...
CVE-2026-66798
A flaw was found in cluster-backup-operator. A namespace administrator in open-cluster-management-backup can create a Restore Custom Resource CR with malicious hooks. These hooks allow the execution of arbitrary commands within any matching restored pod, leading to the exfiltration of...
WordPress 1 Click WordPress Migration plugin <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php vulnerability
Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php vulnerability discovered by Joshua Provoste in WordPress Plugin 1 Click WordPress Migration versions = 2.2...
ocm-industrie.com Improper Access Control vulnerability OBB-3807991
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-2250
The CVE-2023-2250 entry concerns Open Cluster Management (OCM). Affected component/condition: a user with access to worker nodes containing the cluster-manager-registration-controller or cluster-manager deployments can escalate privileges. Root cause: a malicious user can bind the cluster-admin r...
CVE-2019-2489
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: OCM Query. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access...
CVE-2013-3842
CVE-2013-3842 affects Oracle Solaris 10, specifically the Oracle Configuration Manager (OCM) subcomponent. The connected sources describe an unspecified vulnerability that allows local users to compromise confidentiality, with exploitation described as local and capable of yielding partial confid...
Solaris 10 (sparc) : 150618-02 (deprecated)
Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Oracle Configuration Manager OCM. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...
