Known vulnerabilities in openshift-ansible (Red Hat package)

Vendor: Red Hat Inc.

Software: openshift-ansible (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 223

Public exploits: 17

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (223)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111945 - Improper Certificate Validation CVE-2025-6032	CWE-295	Medium	No	No	4.17.0-202507011904.p0.gde5283f.assembly.stream.el8, 4.17.0-202507011904.p0.gde5283f.assembly.stream.el9	25.06.2025	SB2025062534 SB2025062541 SB2025062542 and 26 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871	CWE-444	Medium	No	No	4.15.0-202507041136.p0.g41f6580.assembly.stream.el8, 4.15.0-202507041136.p0.g41f6580.assembly.stream.el9, 4.16.0-202507050035.p0.g06f35b9.assembly.stream.el8, 4.16.0-202507050035.p0.g06f35b9.assembly.stream.el9, 4.17.0-202507011904.p0.gde5283f.assembly.stream.el8, 4.17.0-202507011904.p0.gde5283f.assembly.stream.el9, 4.18.0-202507011252.p0.g8c16b0b.assembly.stream.el8, 4.18.0-202507011252.p0.g8c16b0b.assembly.stream.el9, 4.19.0-202506111249.p0.g75653ac.assembly.stream.el8, 4.19.0-202506111249.p0.g75653ac.assembly.stream.el9	05.04.2025	SB2025040507 SB2025040508 SB2025040739 and 109 more
#VU26474 - Uncontrolled Memory Allocation CVE-2020-8552	CWE-789	Medium	No	No	4.3.9-202003230116.git.0.6124c7d.el7	31.03.2020	SB2020033111 SB2020040174 SB2020042251 and 6 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-11236	CWE-93	Medium	Available	No	4.3.28-202006270952.p0.git.0.c07ec65.el7, 4.4.0-202006271254.p0.git.0.d256229.el7	26.03.2020	SB2020032626 SB2020031827 SB2019091504 and 38 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2163	CWE-79	Low	No	No	4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7	26.03.2020	SB2020032622 SB2020032668 SB2020061738 and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2162	CWE-79	Low	No	No	4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7	26.03.2020	SB2020032622 SB2020032667 SB2020061738 and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2161	CWE-79	Low	No	No	4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7	26.03.2020	SB2020032622 SB2020032662 SB2020061738 and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF) CVE-2020-2160	CWE-352	Low	No	No	4.3.25-202006060952.git.1.1253fde.el7, 4.4.0-202006061254.git.1.a996454.el7	26.03.2020	SB2020032622 SB2020032661 SB2020061738 and 1 more
#VU25458 - Heap-based Buffer Overflow CVE-2020-7039	CWE-122	Low	No	No	4.3.1-202001310552.git.174.dcdb91b.el7	19.02.2020	SB2020021912 SB2020031117 SB2020031053 and 26 more
#VU25457 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-7211	CWE-22	Low	No	No	4.3.1-202001310552.git.174.dcdb91b.el7	19.02.2020	SB2020021912 SB2020021193
#VU24764 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-2105	CWE-451	Low	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013005 SB20200310153
#VU24763 - Exposure of sensitive information to an unauthorized actor CVE-2020-2104	CWE-200	Low	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013005 SB20200310153
#VU24762 - Exposure of sensitive information to an unauthorized actor CVE-2020-2103	CWE-200	Low	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013005 SB20200310153
#VU24761 - Cryptographic Issues CVE-2020-2102	CWE-310	Medium	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013005 SB20200310153
#VU24760 - Exposure of sensitive information to an unauthorized actor CVE-2020-2101	CWE-200	Medium	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013005 SB20200310153
#VU24759 - Resource Management Errors CVE-2020-2100	CWE-399	Medium	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013005 SB20200310153
#VU24758 - Improper Authentication CVE-2020-2099	CWE-287	High	No	No	4.3.5-202002280657.git.1.e4f02b3.el7	30.01.2020	SB2020013004 SB20200310153
#VU21780 - Improper Certificate Validation CVE-2019-11324	CWE-295	Medium	Available	No	4.3.28-202006270952.p0.git.0.c07ec65.el7, 4.4.0-202006271254.p0.git.0.d256229.el7	15.10.2019	SB2019041823 SB2020031827 SB2019091504 and 20 more
#VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-10392	CWE-78	Medium	No	No	4.1.37-202002280447.git.1.bb180eb.el7, 4.2.20-202002140432.git.187.2308b53.el7, 4.3.3-202002142331.git.173.bb0b5a1.el7	16.09.2019	SB2019091607 SB2020061842 SB2020022451 and 2 more
#VU30806 - Permissions, Privileges, and Access Controls CVE-2019-11249	CWE-264	Medium	No	No	4.1.16-201909090609.git.162.a0800db.el7	29.08.2019	SB2019082915 SB2019080656 SB2019103060 and 2 more

Showing elements 1 - 20 out of 223

Known vulnerabilities in openshift-ansible (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (223)

Please verify you're human