Red Hat Cryostat 4 on RHEL 9
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-8415 | fixed in 0.5.2-3 | Cryostat: authentication bypass if network policies are disabled | MEDIUM 5.9 | 0.3 % | ||
| CVE-2024-12397 | fixed in 0.5.0-6 | Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling | HIGH 7.4 | 0.9 % |