Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 2

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109844 - Untrusted Search Path
CVE-2025-4802		 CWE-426 Low
No
No
 1.3.7, 1.4.5 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU104044 - Resource exhaustion
CVE-2024-12243		 CWE-400 Medium
No
No
 1.3.7, 1.4.5 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103504 - Out-of-bounds write
CVE-2025-24528		 CWE-787 Medium
No
No
 1.3.7, 1.4.5 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747		 CWE-362 Low
No
No
 1.3.7, 1.4.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 1.4.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU101722 - Type confusion
CVE-2024-54505		 CWE-843 High
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101721 - Improper input validation
CVE-2024-54508		 CWE-20 Low
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101720 - Improper input validation
CVE-2024-54502		 CWE-20 Low
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101719 - Improper input validation
CVE-2024-54479		 CWE-20 Low
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 31 more
#VU101246 - Out-of-bounds write
CVE-2024-47615		 CWE-787 High
No
No
 1.4.2 04.12.2024 SB2024120472
SB2024121365
SB2024121366
and 26 more
#VU101216 - Stack-based buffer overflow
CVE-2024-47607		 CWE-121 High
No
No
 1.4.2 04.12.2024 SB2024120472
SB2024121365
SB2024121366
and 26 more
#VU101206 - Stack-based buffer overflow
CVE-2024-47538		 CWE-121 High
No
No
 1.4.2 04.12.2024 SB2024120472
SB2024121365
SB2024121366
and 26 more
#VU100912 - Improper Authentication
CVE-2024-10963		 CWE-287 Medium
No
No
 1.4.2 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU100774 - Out-of-bounds read
CVE-2024-50612		 CWE-125 Medium
No
No
 1.4.2 21.11.2024 SB2024112116
SB2024112134
SB2024112135
and 16 more
#VU100516 - Improper input validation
CVE-2024-11168		 CWE-20 Medium
No
No
 1.4.2 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 1.4.2 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462		 CWE-401 Medium
No
No
 1.4.2 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU91755 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-3661		 CWE-300 Medium
No
No
 1.4.2 11.06.2024 SB20240611271
SB2025011365
SB2025011657
and 7 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 1.4.2 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 1.4.2 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more


Showing elements 21 - 40 out of 307