Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 10

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80575 - Improper input validation
CVE-2023-39322		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 53 more
#VU80574 - Improper input validation
CVE-2023-39321		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 54 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 - 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 1.1.6 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 - 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 1.1.6 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76308 - Improper Authentication
CVE-2023-32360		 CWE-287 Medium
No
No
 1.1.6 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 1.1.6 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 1.0.11, 1.1.6 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 1.1.6 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 1.1.6 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.1.6 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.1.6 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72601 - Out-of-bounds write
CVE-2023-0804		 CWE-787 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 31 more
#VU72598 - Out-of-bounds read
CVE-2023-0802		 CWE-125 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 30 more
#VU72597 - Out-of-bounds read
CVE-2023-0801		 CWE-125 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 29 more
#VU72596 - Out-of-bounds read
CVE-2023-0800		 CWE-125 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 30 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 1.0.4, 1.0.5, 1.1.0, 1.1.6 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more


Showing elements 181 - 200 out of 307