Known vulnerabilities in OpenShift API for Data Protection (OADP)

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112440 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-3576		 CWE-327 Medium
No
No
 1.4.5 07.07.2025 SB2025070764
SB2025070769
SB2025070770
and 29 more
#VU111872 - Resource Management Errors
CVE-2025-5702		 CWE-399 Medium
No
No
 1.4.5 24.06.2025 SB2025062437
SB2025062438
SB2025062439
and 11 more
#VU111225 - Integer overflow
CVE-2025-6021		 CWE-190 High
No
No
 1.4.5 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 1.4.5 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 1.4.5 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 65 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 1.4.5 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 1.3.7, 1.4.5 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105900 - Memory corruption
CVE-2025-25724		 CWE-119 High
No
No
 1.4.5 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 1.3.7, 1.4.5 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 1.4.5 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU105450 - Resource exhaustion
CVE-2025-27144		 CWE-400 Medium
No
No
 1.4.5 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 1.4.5 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 1.4.5 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 1.3.7, 1.4.5 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103687 - Memory corruption
CVE-2025-0395		 CWE-119 Medium
No
No
 1.4.5 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613		 CWE-88 Low
No
No
 1.4.5 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 1.3.7, 1.4.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 1.3.7, 1.4.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 1.3.7, 1.4.5 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Available
No
 1.4.5 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more


Showing elements 1 - 20 out of 307