Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 4

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101722 - Type confusion
CVE-2024-54505		 CWE-843 High
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101721 - Improper input validation
CVE-2024-54508		 CWE-20 Low
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101720 - Improper input validation
CVE-2024-54502		 CWE-20 Low
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101719 - Improper input validation
CVE-2024-54479		 CWE-20 Low
No
No
 1.4.2 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 31 more
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532		 CWE-835 Low
No
No
 1.3.4, 1.4.2 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more
#VU100445 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52530		 CWE-444 Medium
No
No
 1.3.4, 1.4.2 13.11.2024 SB2024111328
SB2024111330
SB2024111331
and 36 more
#VU99353 - Resource exhaustion
CVE-2024-6501		 CWE-400 Medium
No
No
 1.3.4 25.10.2024 SB2024102561
SB2024102562
SB2024111237
and 1 more
#VU97349 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-40866		 CWE-451 Medium
No
No
 1.3.4 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 26 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 1.3.4 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 1.3.4 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU92284 - Improper input validation
CVE-2024-33870		 CWE-20 High
No
No
 1.3.4 19.06.2024 SB20240613135
SB2024061967
SB2024062733
and 13 more
#VU92283 - Improper input validation
CVE-2024-33869		 CWE-20 High
No
No
 1.3.4 19.06.2024 SB20240613135
SB2024061967
SB20240702141
and 13 more
#VU92282 - Use of Externally-Controlled Format String
CVE-2024-29510		 CWE-134 High
Available
Exploited
 1.3.4 19.06.2024 SB20240613135
SB2024061967
SB2024062733
and 14 more
#VU89685 - Improper Validation of Integrity Check Value
CVE-2024-3727		 CWE-354 Medium
No
No
 1.3.4 21.05.2024 SB2024052112
SB2024052116
SB2024052117
and 68 more
#VU89351 - Insufficient Verification of Data Authenticity
CVE-2024-34397		 CWE-345 Low
No
No
 1.3.4 10.05.2024 SB2024051042
SB2024051043
SB2024051044
and 88 more
#VU87849 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-29482		 CWE-835 Medium
No
No
 1.0.1 27.03.2024 SB2024032727
SB2021072832
SB2022030135
and 1 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 1.3.4 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU63770 - Insufficient Verification of Data Authenticity
CVE-2021-4122		 CWE-345 Medium
No
No
 1.0.1 27.05.2022 SB2022061409
SB2022021531
SB2022082249
and 12 more
#VU59993 - Improper Verification of Cryptographic Signature
CVE-2021-3521		 CWE-347 Medium
No
No
 1.0.1 25.01.2022 SB2022012518
SB2022012519
SB2022020935
and 23 more
#VU58229 - Type confusion
CVE-2021-41190		 CWE-843 Low
No
No
 1.0.1 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more


Showing elements 61 - 80 out of 307