Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 11

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75915 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-2491		 CWE-78 High
No
No
 1.1.5 09.05.2023 SB20230509106
SB2023051666
SB2023042426
and 17 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 1.1.5 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 1.0.11, 1.1.5 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 1.1.5 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 1.0.11, 1.1.6 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 1.1.5 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537		 CWE-835 Medium
No
No
 1.1.5 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 1.1.5 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 1.1.5 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74146 - Improper Privilege Management
CVE-2023-26604		 CWE-269 Low
No
No
 1.0.11 28.03.2023 SB2023032869
SB2023032871
SB2023040540
and 56 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 1.1.5 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 1.1.3 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 1.1.5, 1.1.6 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 1.1.3 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 1.1.3 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU69585 - Integer overflow
CVE-2022-3970		 CWE-190 High
No
No
 1.1.5 25.11.2022 SB2022112501
SB2022112507
SB2022112821
and 33 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 1.1.5 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU68817 - Out-of-bounds write
CVE-2022-3627		 CWE-787 High
No
No
 1.1.5 28.10.2022 SB2022102808
SB2022111719
SB2022112821
and 24 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 1.1.2 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU63280 - Use After Free
CVE-2022-26709		 CWE-416 High
No
No
 1.1.2 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 36 more


Showing elements 201 - 220 out of 307