Calico

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-28224 Go MEDIUM PATCH This Month

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Calico Calico Enterprise

NVD

CVSS 3.1

5.5

EPSS

0.6%

CVE-2020-13597 Go LOW PATCH Monitor

Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Calico

NVD GitHub

CVSS 3.1

3.5

EPSS

0.9%

CVE-2022-28224 Go

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Information Disclosure Calico Calico Enterprise

NVD

CVE-2020-13597 Go

EPSS 1% CVSS 3.5

LOW PATCH Monitor

Information Disclosure Calico

NVD GitHub