Known vulnerabilities in OpenShift API for Data Protection (OADP) - page 9

Vendor: Red Hat Inc.
Software: OpenShift API for Data Protection (OADP)
Software CPE: cpe:2.3:a:red_hat:oadp:*:*:*:*:*:red_hat_openshift_container_platform:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 307
Public exploits: 18
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift API for Data Protection (OADP) OpenShift API for Data Protection (OADP) is affected by 307 known vulnerabilities: 2 critical, 67 high, 164 medium, 74 low Critical High Medium Low

Vulnerabilities (307)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87538 - Resource exhaustion
CVE-2024-28180		 CWE-400 Medium
No
No
 1.3.1 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 1.3.1 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 1.3.1 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.3.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.3.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83546 - Resource exhaustion
CVE-2023-45142		 CWE-400 Medium
No
No
 1.3.0, 1.3.1 29.11.2023 SB2023112912
SB2023112913
SB2023112949
and 54 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 1.0.14, 1.3.0 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.0.14, 1.3.0 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Available
Exploited
 - 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU80575 - Improper input validation
CVE-2023-39322		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321		 CWE-20 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 - 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 1.3.1 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 - 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 - 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU72601 - Out-of-bounds write
CVE-2023-0804		 CWE-787 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 31 more
#VU72600 - Out-of-bounds write
CVE-2023-0803		 CWE-787 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 30 more
#VU72598 - Out-of-bounds read
CVE-2023-0802		 CWE-125 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 30 more
#VU72597 - Out-of-bounds read
CVE-2023-0801		 CWE-125 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 29 more
#VU72596 - Out-of-bounds read
CVE-2023-0800		 CWE-125 Medium
No
No
 - 27.02.2023 SB2023022727
SB2023022730
SB2023030644
and 30 more


Showing elements 161 - 180 out of 307