Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 4

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532		 CWE-835 Low
No
No
 1.3.4, 1.4.2 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more
#VU100445 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52530		 CWE-444 Medium
No
No
 1.3.4, 1.4.2 13.11.2024 SB2024111328
SB2024111330
SB2024111331
and 36 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 1.3.4, 1.4.2 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99420 - Memory corruption
CVE-2024-44244		 CWE-119 High
No
No
 1.3.4 28.10.2024 SB2024102849
SB2024102850
SB2024102852
and 33 more
#VU99419 - Security Features
CVE-2024-44296		 CWE-254 Medium
No
No
 1.3.4 28.10.2024 SB2024102849
SB2024102850
SB2024102851
and 28 more
#VU99353 - Resource exhaustion
CVE-2024-6501		 CWE-400 Medium
No
No
 1.3.4 25.10.2024 SB2024102561
SB2024102562
SB2024111237
and 1 more
#VU98743 - Memory corruption
CVE-2024-44185		 CWE-119 Low
No
No
 1.3.4 16.10.2024 SB2024101669
SB2024073059
SB2024073048
and 29 more
#VU97745 - Improper input validation
CVE-2024-47175		 CWE-20 High
Available
No
 1.3.4, 1.4.2 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU97350 - Protection Mechanism Failure
CVE-2024-44187		 CWE-693 Low
No
No
 1.3.4 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 32 more
#VU97349 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-40866		 CWE-451 Medium
No
No
 1.3.4 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 26 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 1.3.4 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 1.3.4, 1.4.2 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU94791 - Untrusted Search Path
CVE-2024-6655		 CWE-426 Low
No
No
 1.3.4, 1.4.2 26.07.2024 SB2024072687
SB2024072689
SB2024072694
and 23 more
#VU93868 - Improper input validation
CVE-2024-6239		 CWE-20 Medium
No
No
 1.3.4, 1.4.2 08.07.2024 SB2024070886
SB2024070896
SB2024070897
and 10 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 1.3.4, 1.4.2 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU92284 - Improper input validation
CVE-2024-33870		 CWE-20 High
No
No
 1.3.4 19.06.2024 SB20240613135
SB2024061967
SB2024062733
and 13 more
#VU92283 - Improper input validation
CVE-2024-33869		 CWE-20 High
No
No
 1.3.4 19.06.2024 SB20240613135
SB2024061967
SB20240702141
and 13 more
#VU92282 - Use of Externally-Controlled Format String
CVE-2024-29510		 CWE-134 High
Available
Exploited
 1.3.4 19.06.2024 SB20240613135
SB2024061967
SB2024062733
and 14 more
#VU89861 - Use After Free
CVE-2024-4741		 CWE-416 Medium
No
No
 1.3.4, 1.4.2 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 88 more
#VU89351 - Insufficient Verification of Data Authenticity
CVE-2024-34397		 CWE-345 Low
No
No
 1.3.4 10.05.2024 SB2024051042
SB2024051043
SB2024051044
and 88 more


Showing elements 61 - 80 out of 307