Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 3

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 1.4.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU101246 - Out-of-bounds write
CVE-2024-47615		 CWE-787 High
No
No
 1.4.2 04.12.2024 SB2024120472
SB2024121365
SB2024121366
and 26 more
#VU101216 - Stack-based buffer overflow
CVE-2024-47607		 CWE-121 High
No
No
 1.4.2 04.12.2024 SB2024120472
SB2024121365
SB2024121366
and 26 more
#VU101206 - Stack-based buffer overflow
CVE-2024-47538		 CWE-121 High
No
No
 1.4.2 04.12.2024 SB2024120472
SB2024121365
SB2024121366
and 26 more
#VU100912 - Improper Authentication
CVE-2024-10963		 CWE-287 Medium
No
No
 1.4.2 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU100774 - Out-of-bounds read
CVE-2024-50612		 CWE-125 Medium
No
No
 1.4.2 21.11.2024 SB2024112116
SB2024112134
SB2024112135
and 16 more
#VU100516 - Improper input validation
CVE-2024-11168		 CWE-20 Medium
No
No
 1.4.2 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 1.3.4, 1.4.2 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 1.4.2 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU97745 - Improper input validation
CVE-2024-47175		 CWE-20 High
Available
No
 1.3.4, 1.4.2 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 1.3.4, 1.4.2 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462		 CWE-401 Medium
No
No
 1.4.2 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU94791 - Untrusted Search Path
CVE-2024-6655		 CWE-426 Low
No
No
 1.3.4, 1.4.2 26.07.2024 SB2024072687
SB2024072689
SB2024072694
and 23 more
#VU93868 - Improper input validation
CVE-2024-6239		 CWE-20 Medium
No
No
 1.3.4, 1.4.2 08.07.2024 SB2024070886
SB2024070896
SB2024070897
and 10 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 1.3.4, 1.4.2 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU91755 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-3661		 CWE-300 Medium
No
No
 1.4.2 11.06.2024 SB20240611271
SB2025011365
SB2025011657
and 7 more
#VU89861 - Use After Free
CVE-2024-4741		 CWE-416 Medium
No
No
 1.3.4, 1.4.2 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 89 more
#VU89624 - Resource Management Errors
CVE-2024-4603		 CWE-399 Low
No
No
 1.3.4, 1.4.2 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 1.4.2 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 1.4.2 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more


Showing elements 41 - 60 out of 307